齐治堡垒机存在远程命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/jas502n/sangfor/blob/master/1earn/Security/RedTeam/%E5%AE%89%E9%98%B2%E8%AE%BE%E5%A4%87/SecDevice-Exploits.md
• https://www.cnvd.org.cn/flaw/show/CNVD-2019-17294
• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E9%BD%90%E6%B2%BB%E5%A0%A1%E5%9E%92%E6%9C%BA/%EF%BC%88CNVD-2019-17294%EF%BC%89%E9%BD%90%E6%B2%BB%E5%A0%A1%E5%9E%92%E6%9C%BA%20%E5%90%8E%E5%8F%B0%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
• https://stack.chaitin.com/vuldb/detail/5cb233d9-e5a6-4973-9f93-61ec4cb7dd05
• https://www.cnblogs.com/StudyCat/p/11256944.html
• https://www.cnblogs.com/0day-li/p/13663525.html
• https://baizesec.github.io/bylibrary/%E6%BC%8F%E6%B4%9E%E5%BA%93/04-%E5%8E%82%E5%95%86%E6%BC%8F%E6%B4%9E/%E9%BD%90%E6%B2%BB/%E9%BD%90%E6%B2%BB%E5%A0%A1%E5%9E%92%E6%9C%BA%E5%89%8D%E5%8F%B0%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
• https://www.ddpoc.com/DVB-2021-2156.html
• https://qkl.seebug.org/vuldb/ssvid-98383
• https://blog.csdn.net/qq_44657899/article/details/118254544

Related Vulnerabilities

• 齐治堡垒机 /data_provider.php 后台路径存在命令执行漏洞
• 齐治堡垒机存在SQL注入漏洞
• 齐治堡垒机存在任意文件写入漏洞
• 齐治堡垒机存在未授权访问漏洞
• 齐治堡垒机存在敏感信息泄露漏洞
• 齐治堡垒机 /ha_request.php 路径存在远程命令执行漏洞
• 齐治堡垒机 /worksheet_check.php 路径存在远程命令执行
• 齐治堡垒机存在弱密码漏洞
• 齐治堡垒机-SSRF
• 齐治堡垒机任意用户登录
• 齐治堡垒机远程命令执行漏洞（CNVD-2019-20835）