CVE-2021-45027 PoC — Softlink Oliver v5 Library Server 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45027.yaml

Associated Vulnerability

Title:Softlink Oliver v5 Library Server 安全漏洞 (CVE-2021-45027)
Description:Softlink Oliver v5 Library Server是Softlink公司的一款易于使用的图书馆管理和学习工具。 Softlink Oliver v5 Library Server 5.00.008.053版本存在安全漏洞，该漏洞源于通过 FileServlet 函数允许攻击者使用未经处理的用户提供的输入下载任意文件。

Description

Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function.

File Snapshot


 id: CVE-2021-45027

info:
  name: Oliver 5 Library Server <8.00.008.053 - Local File Inclusion
  aut

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!