unauthenticated-prtg: PRTG Traffic Grapher - Unauthenticated Access

日期: 2025-08-01 | 影响软件: PRTG Traffic Grapher | POC: 已公开

漏洞描述

PRTG Traffic Grapher was able to be accessed with no authentication requirements in place.

PoC代码[已公开]

id: unauthenticated-prtg

info:
  name: PRTG Traffic Grapher - Unauthenticated Access
  author: dhiyaneshDK
  severity: high
  description: PRTG Traffic Grapher was able to be accessed with no authentication requirements in place.
  reference:
    - https://www.exploit-db.com/ghdb/5808
  metadata:
    max-request: 1
  tags: config,unauth,prtg,edb,misconfig,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/sensorlist.htm"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'PRTG Traffic Grapher'
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a004730450220464a9c8ffd95fb871cffb63759c7970b75a885bebacdce1892fd9d914134ad50022100dbad8dc0e1de5115d3e0e4d0444db15aa3f609803b88eab4b072cde3cb5e9316:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/unauthenticated-prtg.yaml

相关漏洞推荐