CVE-2024-3274 PoC — D-Link DNS-320 信息泄露漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3274.yaml

Associated Vulnerability

Title:D-Link DNS-320 信息泄露漏洞 (CVE-2024-3274)
Description:D-Link DNS-320是中国友讯（D-Link）公司的一款NAS（网络附属存储）设备。 D-Link DNS-320L存在信息泄露漏洞，该漏洞源于文件/cgi-bin/info.cgi存在信息泄露漏洞。受影响的产品和版本：D-Link DNS-320L，DNS-325，DNS-327，DNS-340L， D-Link NAS Storage。

Description

A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler.

File Snapshot


 id: CVE-2024-3274

info:
  name: D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure
  a

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!