openSIS v9.1存在路径遍历(CVE-2023-38879)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-38879
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38879.yaml
• https://s4e.io/tools/opensis-path-traversal-cve-2023-38879
• https://pentest-tools.com/vulnerabilities-exploits/opensis-v90-path-traversal_27152
• https://www.threatquarters.com/cves/CVE-2023-38879
• https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-38879
• https://www.ddpoc.com/DVB-2025-10044.html
• https://www.incibe.es/index.php/incibe-cert/alerta-temprana/vulnerabilidades/cve-2023-38879
• https://github.com/OS4ED/openSIS-Classic

Related Vulnerabilities

• openSIS-Classic /ResetUserInfo.php SQL 注入漏洞（CVE-2024-51211）
• PoCCVE-2020-6637: OpenSIS 7.3 - SQL Injection
• PoCCVE-2021-40542: Opensis-Classic 8.0 - Cross-Site Scripting
• PoCCVE-2021-40651: OS4Ed OpenSIS Community 8.0 - Local File Inclusion
• PoCCVE-2021-41691: openSIS Student Information System 8.0 SQL Injection
• PoCCVE-2023-38879: openSIS v9.0 - Path Traversal
• PoCCVE-2024-35584: openSIS < 9.1 - SQL Injection
• PoCCVE-2024-51211: openSIS Classic v9.1 - SQL Injection
• PoCopensis-installer: openSIS Installation Wizard
• PoCopensis-lfi: openSIS 5.1 - Local File Inclusion
• openSIS v9.0 /DownloadWindow.php 目录遍历漏洞（CVE-2023-38879）
• OpenSIS 8.0 CVE-2021-39378 SQL 注入漏洞