Description
IP-guard 存在权限绕过漏洞，攻击者可绕过权限校验执行上传文件，删除任意文件，下载任意文件等危险操作
IP-guard 权限绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://y4tacker.github.io/2024/04/17/year/2024/4/IP-Guard%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87%E6%B5%85%E6%9E%90/
https://x.threatbook.com/v5/article?threatInfoID=106893
https://www.secrss.com/articles/65343?app=1
https://rivers.chaitin.cn/blog/cq941210lnechd242lo0
https://github.com/adysec/POC/blob/main/wpoc/IP%20guard%20WebServer/IP-guard-WebServer%E5%AD%98%E5%9C%A8%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E(QVD-2024-14103).md
https://www.venustech.com.cn/new_type/aqtg/20240419/27342.html
https://avd.aliyun.com/detail?id=AVD-2024-1718774
https://net.jsut.edu.cn/_t149/2024/0508/c2331a179029/page.htm
https://cn-sec.com/archives/2672627.html
https://www.sangfor.com/farsight-labs-threat-intelligence/cybersecurity/ip-guard-webserver-permission-bypass-vulnerability
https://rustlang.rs/posts/ip-guard-auth-bypass/