智联云采 SRM2.0 restore 存在远程命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://ddpoc.com/DVB-2025-10292.html
• https://www.wlaqsys.com/archives/13168
• https://buaq.net/go-371828.html
• https://www.wlaqsys.com/archives/category/web1
• https://www.wlaqsys.com/archives/category/web1/%E6%99%BA%E8%81%94%E4%BA%91%E9%87%87-srm2-0

Related Vulnerabilities

• 智联云采 SRM2.0 /api/sys/app/autologin 权限绕过漏洞
• 智联云采 SRM2.0 /a/sys/sysMessage/statusList SQL 注入漏洞
• PoCCVE-2022-38130: KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution
• 智联云采 SRM2.0 /adpweb/static/..;/a/db/dbBackupScheme/restore 命令执行漏洞
• SRM智联云采系统 restore 远程代码执行漏洞
• 索贝融媒体 /sobey-mchEditor/mch/WXArticleInt/restore SQL注入漏洞
• Atlassian Confluence /json/setup-restore.action 文件上传漏洞（CVE-2023-22518）
• PoCCVE-2024-12209: WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion
• PoCwindows-system-restore-not-configured: System Restore Not Configured
• WordPress plugin UpdraftPlus - Backup/Restore 跨站脚本漏洞
• PoC智联云采 SRM2.0 /adpweb/api/srm/delivery/quickReceiptDetail SQL 注入漏洞