漏洞描述
Netgear-WN604存在信息泄露漏洞。此漏洞是由于downloadFile.php对于用户的请求缺乏校验导致的。
Netgear-WN604 downloadFile.php 信息泄露漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-20167: Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun
- POC CVE-2024-30568: Netgear R6850 V1.1.0.88 - Command Injection
- POC CVE-2024-30569: Netgear R6850 - Information Disclosure
- POC CVE-2024-30570: Netgear R6850 - Information Disclosure
- POC CVE-2024-57046: Netgear DGN2200 - Improper Authentication
- POC CVE-2024-6646: Netgear-WN604 downloadFile.php - Information Disclosure
- POC shengjiao-erp-downloadfile-fileread: ShengJiao ERP downloadFile.action Arbitrary File Read
- POC netgear-boarddataww-rce: Netgear Devices boardDataWW.php - Remote Command Execution
- POC dlink-netgear-xss: Dlink DSR-250 and Netgear Prosafe - Cross-Site Scripting
- POC netgear-dgn-rce: Netgear DGN Devices - Command Execution
- POC netgear-wnr614-auth-bypass: Netgear WNR614 - Improper Authentication
- 圣乔ERP downloadFile 任意文件读取漏洞
- 圣乔ERP系统 /erp/wap/../downloadFile.action 文件读取漏洞