References https://stack.chaitin.com/vuldb/detail/d3bf6b23-69fe-4d37-8b81-720298faab7b https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%80%9A%E5%A4%A9%E6%98%9F/%E9%80%9A%E5%A4%A9%E6%98%9FCMSV6%E6%8E%A5%E5%8F%A3pointManage%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5.md https://cn-sec.com/archives/2898779.html https://rivers.chaitin.cn/blog/cq9410p0lnechd242ll0
Related Vulnerabilities通天星CMSV6车载视频监控平台 /808gps/StandardLoginAction_downLoad.action 文件读取漏洞通天星CMSV6车载视频监控平台 /StandardApiAction_login.action 默认口令漏洞(CVE-2024-29666)通天星CMSV6车载定位监控平台 /edu_security_officer/disable;downloadLogger.action SQL 注入漏洞seacmsv645-command-exec: SeaCMS V645 RCEPoCcmsv6-inspect-file-upload: 通天星-CMSV6-inspect_file-upload存在任意文件上传漏洞PoChongyun-tongtianxing-cms-v6-disclosure: 鸿运(通天星CMSV6车载)主动安全监控云平台存在敏感信息泄露PoChongyun-tongtianxing-cms-v6-fileread: 鸿运(通天星CMSV6车载)主动安全监控云平台任意文件读取通天星CMSV6车载监控平台 /808gps/LoggerManagement 未授权访问漏洞通天星CMSV6 getAlarmAppealByGuid SQL注入漏洞通天星CMSV6车载视频监控平台 UserSessionAction_saveUserSession.action 权限绕过漏洞通天星CMSV6 StandardLoginAction_downLoad 文件读取漏洞