CVE-2014-2962 PoC — Belkin N150 F9K1009 绝对路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2962.yaml

Associated Vulnerability

Title:Belkin N150 F9K1009 绝对路径遍历漏洞 (CVE-2014-2962)
Description:Belkin N150 F9K1009是美国贝尔金（Belkin）公司一款无线路由器产品。使用1.00.07及之前版本固件的Belkin N150 F9K1009 v1路由器中的webproc cgi模块存在绝对路径遍历漏洞。远程攻击者可借助‘getpage’参数中的完整路径名利用该漏洞读取任意文件。

Description

A path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.

File Snapshot


 id: CVE-2014-2962

info:
  name: Belkin N150 Router 1.00.08/1.00.09 - Path Traversal
  author: daffa

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!