碧海威 confirm.php 远程命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ddpoc.com/DVB-2021-2726.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%A2%A7%E6%B5%B7%E5%A8%81/%E7%A2%A7%E6%B5%B7%E5%A8%81L7%E4%BA%A7%E5%93%81confirm%E5%AD%98%E5%9C%A8%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/weixin_43167326/article/details/139956367
• https://cn-sec.com/archives/2904386.html
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/iot/%E7%A2%A7%E6%B5%B7%E5%A8%81-L7%E5%A4%9A%E6%AC%BE%E4%BA%A7%E5%93%81-%E5%90%8E%E5%8F%B0%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://cn-sec.com/archives/2902637.html
• https://cn-sec.com/archives/2898794.html
• https://cn-sec.com/archives/2885759.html
• https://www.secevery.com/toBugInfo?id=1806106637656825857

Related Vulnerabilities

• PoC用友-时空KSOA /luntan/chatconfirm.jsp SQL 注入漏洞
• PoC用友-时空KSOA chatconfirm 存在SQL注入漏洞
• 天锐绿盾审批系统 /trwfe/file/downFileByconfirm.do 文件读取漏洞
• 天锐绿盾审批系统 downFileByconfirm.do 存在任意文件读取漏洞
• PoC天锐绿盾审批系统 downFileByconfirm.do 任意文件读取漏洞
• PoCbithighway-default-password: 碧海威 L7 弱口令漏洞
• PoCjinhe-oa-taskreportconfirm-sqli: 金和OA-TaskReportConfirm.aspx存在SQL注入漏洞
• 碧海威L7多款产品index存在命令执行漏洞
• PoC金和OA-C6 TaskReportConfirm.aspx 存在SQL注入漏洞
• Unibox路由器 confirmreset 存在sql注入漏洞
• PoC神州讯盟芯管家 login_confirm.jsp 存在SQL注入漏洞