漏洞描述
【漏洞对象】Surveillance DVR 【涉及版本】 4.0.0.0版本 【漏洞描述】 摄像头录像大师Argus SurveillanceDVR的WEBACCOUNT.CGI文件RESULTPAGE参数路径遍历导致可读取系统配置文件，导致网站处于极度不安全状态。
Argus Surveillance DVR WEBACCOUNT.CGI文件RESULTPAGE参数-目录遍历(CVE-2018-15745)
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-41419: QVIS NVR/DVR - Remote Code Execution
- POC CVE-2018-15745: Argus Surveillance DVR 4.0.0.0 - Local File Inclusion
- POC CVE-2018-9995: TBK DVR4104/DVR4216 Devices - Authentication Bypass
- POC CVE-2021-42071: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection
- POC CVE-2024-7339: TVT DVR Sensitive Device - Information Disclosure
- POC CVE-2018-9995: DVR Authentication Bypass
- POC avtech-dvr-exposure: Avtech AVC798HA DVR Information Exposure
- POC CVE-2013-4982: AVTECH DVR - Login Verification Code Bypass
- POC avtech-dvr-exposure: AVTECH AVC798HA DVR - Information Exposure
- POC qvisdvr-deserialization-rce: QVISDVR JSF Deserialization - Remote Code Execution
- POC intelbras-dvr-unauth: Intelbras DVR - Unrestricted Access
- POC avtech-dvr-ssrf: AVTECH DVR - SSRF
- POC commax-credentials-disclosure: COMMAX Smart Home Ruvie CCTV Bridge DVR - RTSP Credentials Disclosure