Description
Sawtooth Lighthouse Studio 的 /cgi-bin/ciwweb.pl 文件存在远程代码执行漏洞。攻击者可以通过特制的请求在受影响的服务器上执行任意代码，可能导致服务器被完全控制、数据泄露和系统崩溃等严重后果。
Sawtooth Lighthouse Studio /cgi-bin/ciwweb.pl 命令执行漏洞（CVE-2025-34300）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ctfiot.com/262292.html
https://nosec.org/m/share/5899.html
https://nvd.nist.gov/vuln/detail/CVE-2025-34300
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34300.yaml
https://www.rapid7.com/db/modules/exploit/multi/http/lighthouse_studio_unauth_rce_cve_2025_34300/
https://slcyber.io/assetnote-security-research-center/rce-in-the-most-popular-survey-software-youve-never-heard-of/
https://www.vulncheck.com/advisories/sawtooth-software-lighthouse-studio-preauthentication-rce
https://securityonline.info/cve-2025-34300-cvss-10-critical-rce-flaw-in-lighthouse-studios-cgi-scripts-threatens-survey-servers-worldwide/
https://dbugs.ptsecurity.com/vulnerability/PT-2025-29823
https://www.sentinelone.com/vulnerability-database/cve-2025-34300/
https://sawtoothsoftware.com/resources/software-downloads/lighthouse-studio/version-history