CVE-2020-15568 PoC — Terramaster TOS 操作系统命令注入漏洞

Source

https://github.com/n0bugz/CVE-2020-15568

Associated Vulnerability

Title:Terramaster TOS 操作系统命令注入漏洞 (CVE-2020-15568)
Description:Terramaster TOS是中国铁威马（Terramaster）公司的一款基于Linux平台的，专用于erraMaster云存储NAS服务器的操作系统。 TerraMaster TOS before 4.1.29 存在操作系统命令注入漏洞，该漏洞源于无效的参数检查，导致代码以root注入。

Description

A quick and easy POC for CVE-2020-15568

Readme

# CVE-2020-15568
A quick and easy POC for CVE-2020-15568.

Not tested but going off of information found here: https://ssd-disclosure.com/ssd-advisory-terramaster-os-exportuser-php-remote-code-execution/

File Snapshot


 [4.0K]  /data/pocs/53def6fd3d63615424225ac5f73f898ead9ae54d
├── [1.1K]  CVE-2020-15568.py
└── [ 204]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!