Coremail 邮件系统存在鉴权绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/ibaiw/2023Hvv/blob/main/Coremail%20%E9%82%AE%E4%BB%B6%E7%B3%BB%E7%BB%9F%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE%E8%8E%B7%E5%8F%96%E7%AE%A1%E7%90%86%E5%91%98%E8%B4%A6%E5%AF%86.md
• https://www.ddpoc.com/DVB-2021-2398.html
• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Coremail/Coremail%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F/
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/Coremail-%E9%85%8D%E7%BD%AE%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md
• https://www.cnvd.org.cn/flaw/show/CNVD-2016-10575
• https://www.secrss.com/articles/11402
• https://cybersecurity.sdu.edu.cn/info/1017/1031.htm
• https://www.ddpoc.com/DVB-2024-8147.html
• https://www.cnblogs.com/Sylon/p/11747476.html

Related Vulnerabilities

• CNVD-2019-16798: Coremail Information Disclosure
• coremail-manager-password-disclosure: Coremail 邮件系统未授权访问获取管理员账密
• PoCcoremail-config-disclosure: Coremail - Config Discovery
• coremail ssrf/任意文件读取漏洞
• Coremail 邮件系统存在远程命令执行漏洞
• Coremail 邮件系统存在任意文件读取漏洞
• Coremail 邮件系统 Tomcat 后台存在鉴权绕过漏洞
• Coremail XT5/XT6 远程代码执行漏洞
• Coremail 邮件系统 apiTest 接口存在远程命令执行
• Coremail 邮件系统存在弱口令漏洞
• Coremail 邮件系统 邮件处理模块存在远程代码执行漏洞
• Coremail 邮件系统未授权访问获取管理员账密
• Coremail 邮件系统 /action.jsp 路径存在任意文件上传漏洞