CVE-2021-46381 PoC — D-Link DAP-1620 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46381.yaml

Associated Vulnerability

Title:D-Link DAP-1620 路径遍历漏洞 (CVE-2021-46381)
Description:D-Link DAP-1620是中国台湾友讯（D-Link）公司的一个无线中继扩展器。 D-Link DAP-1620 存在路径遍历漏洞，该漏洞源于 D-Link DAP-1620 中的路径遍历导致的本地文件包含导致未经授权的内部文件读取 [/etc/passwd] 和 [/etc/shadow]。

Description

D-Link DAP-1620 is susceptible to local file Inclusion due to path traversal that can  lead to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].

File Snapshot


 id: CVE-2021-46381

info:
  name: D-Link DAP-1620 - Local File Inclusion
  author: 0x_Akoko
  severi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!