Description
碧海威L7云路由无线运营版存在远程代码注入漏洞，此漏洞是confirm.php对用户输入的数据缺乏校验导致的。
碧海威L7云路由无线运营版 confirm.php 远程代码注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.secevery.com/toBugInfo?id=1806106637656825857
https://blog.csdn.net/weixin_43167326/article/details/139956367
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%A2%A7%E6%B5%B7%E5%A8%81/%E7%A2%A7%E6%B5%B7%E5%A8%81L7%E4%BA%A7%E5%93%81confirm%E5%AD%98%E5%9C%A8%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
https://cn-sec.com/archives/2902637.html
https://k0u1g.cn/VulnLib/%E6%BC%8F%E6%B4%9E%E5%BA%932024.html#碧海威-l7-%E4%BA%91%E8%B7%AF%E6%97%A0%E7%BA%BF%E8%BF%90%E8%90%A5%E7%89%88confirm-php-jumper-php%E5%91%BD%E4%BB%A4%E6%B4%9E%E6%BC%8F%E6%B4%9E%E6%BC%8F%E6%B4%9E%E5%91%BD%E4%BB%A4%E6%BC%8F%E6%B4%9E