POC详情： 5c0340f6c1b114c75f498d36a9f3b2549815226b

来源
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7120.yaml
关联漏洞
标题： Raisecom MSG1200、MSG2100E、MSG2200和MSG2300 操作系统命令注入漏洞 (CVE-2024-7120)
描述：Raisecom MSG1200等都是中国瑞斯达康（Raisecom）公司的一款千兆融合网关。 Raisecom MSG1200、MSG2100E、MSG2200和MSG2300存在操作系统命令注入漏洞，该漏洞源于对参数template的错误操作会导致操作系统命令注入。
描述
A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file list_base_config.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272451.
文件快照

 id: CVE-2024-7120

info:
  name: Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 - Command Inje

...
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。