漏洞描述
Spider-Flow是新一代爬虫平台，平台以流程图的方式定义爬虫，是一个高度灵活可配置的爬虫平台，该系统存在信息泄露，可未授权查看系统数据库配置信息
Spider-Flow爬虫平台信息泄露
PoC代码
暂无相关漏洞推荐
- POC CVE-2015-2196: WordPress Spider Calendar <=1.4.9 - SQL Injection
- POC CVE-2018-10383: Lantronix SecureLinx Spider (SLS) 2.2+ - Cross-Site Scripting
- POC CVE-2022-0212: WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting
- POC CVE-2024-0195: SpiderFlow Crawler Platform - Remote Code Execution
- POC CVE-2024-6746: EasySpider 0.6.2 - Arbitrary File Read
- POC spiderflow-save-rce: SpiderFlow save 远程命令执行漏洞
- POC spidercontrol-scada-server-info: SpiderControl SCADA Web Server - Sensitive Information Exposure
- SpiderFlow爬虫平台远程代码执行漏洞
- spider-flow 远程代码执行漏洞
- SpiderFlow 未授权远程命令执行漏洞