POC详情： 5663011bd58c2e3e83f5696a96d6b8bc22ac9096

来源
https://github.com/rxerium/CVE-2022-41352
关联漏洞
标题： Zimbra Collaboration Suite 路径遍历漏洞 (CVE-2022-41352)
描述：Zimbra Collaboration Suite（ZCS）是美国Zimbra的一款开源协同办公套件。该产品包括WebMail、日历、通信录等。 Zimbra Collaboration Suite (ZCS) 8.8.15版本和9.0版本存在路径遍历漏洞。攻击者利用该漏洞通过amavisd上传任意文件，导致对其他用户帐户的错误访问。
描述
Zimbra Collaboration (ZCS) Arbitrary File Upload Vulnerability
介绍
# CVE-2022-41352 PoC

 ## How does this detection method work?

As stated on the advisories an issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0, the template looks at the following versions:

```
          - "8.8.15"
          - "9.0"
```

 ## How do I run this script?

1. Download Nuclei from [here](https://github.com/projectdiscovery/nuclei)
2. Copy the template to your local system
3. Run the following command: `nuclei -u https://yourHost.com -t template.yaml` 

## References

- https://nvd.nist.gov/vuln/detail/cve-2022-41352
- http://packetstormsecurity.com/files/169458/Zimbra-Collaboration-Suite-TAR-Path-Traversal.html#
- https://forums.zimbra.org/viewtopic.php?t=71153&p=306532


## Disclaimer

Use at your own risk, I will not be responsible for illegal activities you conduct on infrastructure you do not own or have permission to scan.
文件快照

 [4.0K]  /data/pocs/5663011bd58c2e3e83f5696a96d6b8bc22ac9096
├── [ 869]  README.md
└── [1.2K]  template.yaml

0 directories, 2 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。