CVE-2018-12634 PoC — Circontrol CirCarLife Scada 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12634.yaml

Associated Vulnerability

Title:Circontrol CirCarLife Scada 安全漏洞 (CVE-2018-12634)
Description:Circontrol CirCarLife Scada是西班牙Circontrol公司的一套停车场自动化管理系统。 Circontrol CirCarLife Scada 4.2.4版本中存在安全漏洞。远程攻击者可通过对html/log或services/system/info.html URI发送直接请求利用该漏洞获取敏感信息。

Description

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/log or services/system/info.html URI. CirCarLife is an internet-connected electric vehicle charging station.

File Snapshot


 id: CVE-2018-12634

info:
  name: CirCarLife Scada <4.3 - System Log Exposure
  author: geeknik
  se

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!