Description
NetAlertX版本v24.7.18-v24.9.12中发现了一个文件读取漏洞，/php/components/logs.php接口处存在文件读取漏洞，未经身份验证攻击者可通过该漏洞读取系统重要文件（如数据库配置文件、系统配置文件），导致网站处于极度不安全状态。
NetAlertX /php/components/logs.php 文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ddpoc.com/DVB-2025-9054.html
https://www.rapid7.com/db/modules/auxiliary/scanner/http/netalertx_file_read/
https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/
https://github.com/advisories/GHSA-h96f-qxw6-vq8x
https://nvd.nist.gov/vuln/detail/CVE-2024-48766