Description
iMC 是 H3C 系列解决方案的统一管控平台，可以承载终端探测系统、智能营销门户、准入安全管理、移动办公、网络资源管理等众多管理业务。该系统 5.x 版本 dynamiccontent.properties.xhtml 存在任意命令执行漏洞，可以通过该漏洞直接执行恶意命令，从而获取服务器主机权限。
H3C iMC dynamiccontent.properties.xhtml 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/H3C%20IMC%20dynamiccontent.properties.xhtm%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md
https://zhiliao.h3c.com/questions/dispcont/253128
https://zhuanlan.zhihu.com/p/624059379
https://www.cnblogs.com/KHZ521/p/14788608.html
https://peiqi.wgpsec.org/wiki/webapp/H3C/H3C%20IMC%20dynamiccontent.properties.xhtm%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.html
https://cloud.tencent.cn/developer/article/2395783?policyId=1004
https://developer.aliyun.com/article/1597592
https://cn-sec.com/archives/376546.html
https://blog.csdn.net/weixin_44337800/article/details/141228364
https://disk.scan.cm/All_wiki/%E4%BD%A9%E5%A5%87PeiQi-WIKI-POC-2021-7-20%E6%BC%8F%E6%B4%9E%E5%BA%93/_book/PeiQi_Wiki/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/H3C/H3C%20IMC%20dynamiccontent.properties.xhtm%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.html?hash=6b2qz0V8
https://rivers.chaitin.cn/blog/cqq52a10lnec5jjugdcg
https://qkl.seebug.org/vuldb/ssvid-99254
https://www.ddpoc.com/DVB-2021-2472.html
https://www.secevery.com/toBugInfo?id=1820659485484687361
https://forum.90sec.com/t/topic/1986
https://mvip.tophant.com/detail/1900448454543544320
https://gitea.com/Run0nceEx/POC
https://ti.qianxin.com/vulnerability/notice-list
https://www.dbappsecurity.com.cn/content/details2153_24903.html