Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-48323 PoC — Sunlogin Sunflower Simplified 路径遍历漏洞

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48323.yaml
Associated Vulnerability
Title:Sunlogin Sunflower Simplified 路径遍历漏洞 (CVE-2022-48323)
Description:Sunlogin Sunflower（向日葵）是中国向日葵（Sunlogin）公司的一个远程控制软件。 Sunlogin Sunflower Simplified 1.0.1.43315版本存在安全漏洞，该漏洞源于存在路径遍历，远程和未经身份验证的攻击者可以通过发送精心设计的HTTP请求在受害主机上执行任意程序。
Description
Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the pathname of the powershell.exe program.
File Snapshot

 id: CVE-2022-48323

info:
  name: Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution


...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.