CVE-2023-6895: 海康威视IP网络对讲广播系统 ping.php 命令执行

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-6895
• https://www.sentinelone.com/vulnerability-database/cve-2023-6895/
• https://vuldb.com/vuln/248254
• https://github.com/projectdiscovery/nuclei-templates/issues/9168
• https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:CTS:HIKVSN-PHP-CE.html
• https://www.cve.org/CVERecord?id=CVE-2023-6895
• https://github.com/FuBoLuSec/CVE-2023-6895/blob/main/CVE-2023-6895.py
• https://github.com/0day404/HV-2024-POC/blob/main/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86CVE-2023-6895%20IP%E7%BD%91%E7%BB%9C%E5%AF%B9%E8%AE%B2%E5%B9%BF%E6%92%AD%E7%B3%BB%E7%BB%9F%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md
• https://www.lmboke.com/archives/hai-kang-wei-shi-dui-jiang-guang-bo-xi-tong-yuan-cheng-ming-ling-zhi-xing-lou-dong-cve-2023-6895
• https://blog.csdn.net/qq_36618918/article/details/135107451
• https://cn-sec.com/archives/2319442.html
• https://access.redhat.com/security/cve/cve-2023-6895

Related Vulnerabilities

• PoC东胜物流软件 /MvcShipping/MsOpSeae/GetAmsData SQL 注入漏洞
• 东胜物流软件 /MvcShipping/MsChDui/GetFeeDetailList SQL 注入漏洞
• PoC东胜物流软件 /MvcShipping/MsAnnounce/GetData SQL 注入漏洞
• 东胜物流软件 /MvcShipping/MsChDui/GetBLListData SQL 注入漏洞
• PoC东胜物流软件 /MvcShipping/MsChDui/GetDetailList SQL 注入漏洞
• 东胜物流软件 /MvcShipping/MsOpSeae/GetIsManifestSum SQL 注入漏洞
• PoCCVE-2020-37123: Pinger 1.0 - Remote Code Execution
• PoCwp-flexible-shipping-log: WordPress Flexible Shipping - Log File Exposure
• 东胜物流软件 /Shipping/FeeModifySource.aspx SQL 注入漏洞
• 东胜物流 /MvcShipping/MsCodeAll/GetLanesList SQL 注入漏洞
• ilevia EVE X1 Server /ajax/php/ping.php 命令执行漏洞（CVE-2025-60738）