CVE-2023-39026 PoC — FileMage 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39026.yaml

Associated Vulnerability

Title:FileMage 路径遍历漏洞 (CVE-2023-39026)
Description:FileMage是一款用于文件传输和数据管理的软件解决方案。 FileMage Gateway v.1.10.8及之前版本存在安全漏洞，该漏洞源于存在目录遍历漏洞，允许远程攻击者通过精心设计的请求来获取敏感信息。

Description

Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive information via a crafted request to the /mgmt/ component.

File Snapshot


 id: CVE-2023-39026

info:
  name: FileMage Gateway - Directory Traversal
  author: DhiyaneshDk
  sev

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!