CVE-2021-30461 PoC — VoIPmonitor 代码注入漏洞

Source

https://github.com/Vulnmachines/CVE-2021-30461

Associated Vulnerability

Title:VoIPmonitor 代码注入漏洞 (CVE-2021-30461)
Description:VoIPmonitor是VoIPmonitor团队的一个开源网络数据包嗅探器。具有用于在 Linux 上运行的 SIP RTP RTCP SKINNY(SCCP) MGCP WebRTC VoIP 协议的商业前端。 VoIPmonitor web UI 24.61版本之前存在安全漏洞，该漏洞源于当使用recheck选项时，用户提供的SPOOLDIR值(可能包含PHP代码)会被注入到config configuration.php中。

Description

VOIP RCE

Readme

# CVE-2021-30461
VOIP RCE

Technical details https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/

YouTube : https://www.youtube.com/watch?v=9V_BI6Lq-Rw

#### Follow us 
#### [Vulnmachines](https://www.twitter.com/vulnmachines)
#### [YouTube](https://www.youtube.com/c/vulnmachines)
#### [Twitter](https://www.twitter.com/vulnmachines)
#### [Facebook](https://www.facebook.com/vulnmachines)
#### [LinkedIn](https://www.linkedin.com/company/vulnmachines)

File Snapshot


 [4.0K]  /data/pocs/640d9382b2ee202a6a21c3a168313f6b9adac485
├── [2.7K]  exploit.py
└── [ 465]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!