大华智能物联综合管理平台 is-exist log4j漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://blog.csdn.net/qq_41904294/article/details/138710344
• https://cn-sec.com/archives/3336426.html
• https://nebula.wiki/%E6%BC%8F%E6%B4%9E%E5%BA%93/AC/%E5%A4%A7%E5%8D%8E
• https://www.ddpoc.com/DVB-2024-7089.html

Related Vulnerabilities

• Apache Log4j2 远程代码执行漏洞（CVE-2021-44228）
• PoCexist-db-dashboard-access: eXist-DB Dashboard Access
• 大华智能物联综合管理平台 /evo-apigw/evo-cirs/file/download 文件读取漏洞
• PoC金和OA KpiWhetherExistTemplateKpiXml.aspx SQL注入漏洞
• 金和OA /c6/Jhsoft.Web.Appraise/KpiWhetherExistTemplateKpiXml.aspx 存在SQL注入漏洞
• PoCCVE-2021-45046-DAST: Apache Log4j2 - Remote Code Injection
• PoCCVE-2021-44228: Apache Log4j2 Remote Code Injection
• PoCCVE-2021-45046: Apache Log4j2 - Remote Code Injection
• PoCCVE-2017-5645: Apache Log4j Server - Deserialization Command Execution
• PoCCVE-2017-5487: Wordpress<4.7.1 Exist Username Enumeration