CVE-2014-1203 PoC — Eyou Mail System 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-1203.yaml

Associated Vulnerability

Title:Eyou Mail System 安全漏洞 (CVE-2014-1203)
Description:Eyou Mail System是中国亿中邮（eYou）公司的一套电子邮件系统。 Eyou Mail System 3.6之前的版本中的‘get_login_ip_config_file’函数存在安全漏洞。远程攻击者可通过向admin/domain/ip_login_set/d_ip_login_get.php文件发送带有shell元字符的‘domain’参数利用该漏洞执行任意命令。

Description

Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_set/d_ip_login_get.php via the get_login_ip_config_file function.

File Snapshot


 id: CVE-2014-1203

info:
  name: Eyou E-Mail <3.6 - Remote Code Execution
  author: pikpikcu
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!