References https://github.com/0day404/HV-2024-POC/blob/main/H3C%20%E7%94%A8%E6%88%B7%E8%87%AA%E5%8A%A9%E6%9C%8D%E5%8A%A1%E5%B9%B3%E5%8F%B0%20dynamiccontent.properties.xhtml%E5%AD%98%E5%9C%A8RCE%E6%BC%8F%E6%B4%9E.md https://gitee.com/hxyue/POC1/blob/main/H3C%20%E7%94%A8%E6%88%B7%E8%87%AA%E5%8A%A9%E6%9C%8D%E5%8A%A1%E5%B9%B3%E5%8F%B0%20dynamiccontent.properties.xhtml%E5%AD%98%E5%9C%A8RCE%E6%BC%8F%E6%B4%9E.md https://cloud.tencent.com/developer/article/2395674 https://zhiliao.h3c.com/questions/dispcont/253128 https://zhuanlan.zhihu.com/p/624059379 https://zhiliao.h3c.com/questions/dispcont/270897 https://disk.scan.cm/All_wiki/%E4%BD%A9%E5%A5%87PeiQi-WIKI-POC-2021-7-20%E6%BC%8F%E6%B4%9E%E5%BA%93/PeiQi_Wiki/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/H3C/H3C%20IMC%20dynamiccontent.properties.xhtm%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md https://github.com/emadshanab/goby-poc/blob/main/H3C-IMC-dynamiccontent.properties.xhtm-RCE.json https://s4e.io/tools/h3c-imc-remote-code-execution
Related VulnerabilitiesPoCsap-getinstanceproperties-disclosure: SAPControl Webmethods - DisclosurePoC致远OA /seeyon/rest/m3/common/system/properties 信息泄露漏洞PoCCNVD-2021-39067: H3C IMC dynamiccontent.properties.xhtm 远程命令执行PoCcollibra-properties: Collibra Properties ExposurePoCconfig-properties: Config Properties ExposurePoClog4-properties: Log4j Properties - File DisclosurePoCaem-dump-contentnode: AEM Dump Content Node PropertiesPoCsystem-properties-exposure: System Properties ExposurePoCCVE-2014-1843: Titan FTP Server < 10.40 - User Properties TraversalPoChuiwen-book-config-properties-info-leak: 汇文 图书馆书目检索系统 config.properties 信息泄漏漏洞Apache Solr /solr/admin/info/properties:/admin/info/key 权限绕过漏洞(CVE-2024-45216)H3C iMC dynamiccontent.properties.xhtml 远程命令执行漏洞