CVE-2023-4542 PoC — D-Link DAR-8000 操作系统命令注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/cerio-dt-rce.yaml

Associated Vulnerability

Title:D-Link DAR-8000 操作系统命令注入漏洞 (CVE-2023-4542)
Description:D-Link DAR-8000是中国友讯（D-Link）公司的上网行为审计网关。 D-Link DAR-8000-10版本存在操作系统命令注入漏洞，该漏洞源于文件/app/sys1.php的参数id会导致操作系统命令注入。

Description

CERIO DT series routers have an operation command injection vulnerability in specific versions. An attacker could exploit this vulnerability to execute commands.

File Snapshot


 id: cerio-dt-rce

info:
  name: CERIO-DT Interface - Command Execution
  author: pussycat0x
  severi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!