百卓Smart importhtml.php 远程命令执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://peiqi.wgpsec.org/wiki/iot/%E7%99%BE%E5%8D%93/%E7%99%BE%E5%8D%93%20Smart%20importhtml.php%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.html
• https://www.saury.net/1587.html
• https://cn-sec.com/archives/2025613.html
• https://blog.csdn.net/m0_64366018/article/details/135602512
• https://www.ddpoc.com/poc/DVB-2021-2773.html
• https://github.com/Threekiii/Awesome-POC
• https://github.com/ibaiw/2023Hvv/blob/main/%E7%99%BE%E5%8D%93Smart%20S85F%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md

Related Vulnerabilities

• 旭辰資訊｜SmartIT Desktop Manager - 存在4個漏洞
• Apache Kafka UI /smartfilters/testexecutions 代码执行漏洞（CVE-2026-5562）
• PoCCVE-2026-24423: SmarterMail - Remote Code Execution
• 易宝 OA /SmartTradeScan/StockTake/SetScanQty txtBoxNo SQL 注入漏洞
• 太友 QSmart Audit 管理系统存在弱口令
• PoCSmarterMail ConnectToHub /api/v1/settings/sysadmin/connect-to-hub 命令执行漏洞（CVE-2026-24423）
• SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)
• SmarterTools SmarterMail 权限管理不当漏洞
• PoCCVE-2026-23760: SmarterTools SmarterMail - Admin Password Reset
• PoCSmarterMail /api/v1/auth/force-reset-password 权限绕过漏洞
• SmarterMail 存在任意文件上传漏洞
• SmarterMail 存在任意密码重置漏洞