CVE-2024-8877 PoC — RIELLO UPS NetMan 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8877.yaml

Associated Vulnerability

Title:RIELLO UPS NetMan 安全漏洞 (CVE-2024-8877)
Description:RIELLO UPS NetMan是意大利RIELLO UPS公司的一款网络适配器。 RIELLO UPS NetMan 204 4.05版本存在安全漏洞，该漏洞源于存在特殊元素的不适当中和，从而导致SQL注入漏洞。

Description

The three endpoints /cgi-bin/db_datalog_w.cgi, /cgi-bin/db_eventlog_w.cgi, and /cgi-bin/db_multimetr_w.cgi are vulnerable to SQL injection without prior authentication. This enables an attacker to modify the collected log data in an arbitrary way.

File Snapshot


 id: CVE-2024-8877

info:
  name: Riello Netman 204 - SQL Injection
  author: s4e-io
  severity: crit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!