founder-newsedit-syslogin-detect: 方正全媒体采编系统管理后台

2025-08-01 方正全媒体采编系统管理后台 PoC Public

Description

方正全媒体采编系统管理后台

PoC

id: founder-newsedit-syslogin-detect

info:
  name: 方正全媒体采编系统管理后台
  author: zan8in
  severity: info
  verified: true
  description: |-
    方正全媒体采编系统管理后台
  tags: 方正,采编,founder
  created: 2025/03/13

rules:
  r0:
    request:
      method: GET
      path: /newsedit/e5sys/SysLogin.jsp
    expression: |
      response.status == 200 &&
      response.body.bcontains(b'<title>login</title>') &&
      response.body.bcontains(b'/e5workspace/script/security.js') &&
      response.body.bcontains(b'type="hidden" id="Super" name="Super" value="-1"')
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/fingerprinting/founder-newsedit-syslogin-detect.yaml

References

Related Vulnerabilities