CVE-2022-46484 PoC — Data Illusion Survey Software Solutions NGSurvey 信息泄露漏洞

Source

https://github.com/NevaSec/CVE-2022-46484

Associated Vulnerability

Title:Data Illusion Survey Software Solutions NGSurvey 信息泄露漏洞 (CVE-2022-46484)
Description:ngSurvey是ngSurvey公司的一个数据错觉调查软件解决方案。 Data Illusion Survey Software Solutions NGSurvey v2.4.28及之前版本存在信息泄露漏洞，该漏洞源于允许攻击者查看访问密码并任意提交调查。

Description

 Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys.

Readme

# CVE-2022-46484
Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys.

File Snapshot


 [4.0K]  /data/pocs/35414d2e0696d29d270b25eecd73b241094716ec
├── [ 829]  CVE-2022-46484.py
└── [ 220]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!