堡塔云WAF未授权访问漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.bt.cn/bbs/thread-127903-1-1.html
• https://vps.pc6a.com/7674.html
• https://x.com/AabyssZG/status/1758769157955526873
• https://blog.csdn.net/m0_52514790/article/details/136255094
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%AE%9D%E5%A1%94/%E5%AE%9D%E5%A1%94%E6%9C%80%E6%96%B0%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E6%BC%8F%E6%B4%9E%E5%8F%8Asql%E6%B3%A8%E5%85%A5.md
• https://v2ex.com/t/1015932
• https://cloud.tencent.com/developer/article/2518676
• https://www.bilibili.com/video/BV1g9j6z4EhF/

Related Vulnerabilities

• PoCcloudfront-integrated-waf: CloudFront Integrated With WAF
• PoCwaf-detect: WAF Detect
• 绿盟WAF restapi-v3 权限绕过漏洞
• 山石网科 Web 应用防火墙（WAF）/captcha 命令执行漏洞
• 堡塔云 WAF get_site_status 路径 server_name 参数 SQL 注入漏洞
• 堡塔云WAF clear_cache 远程命令执行漏洞