CVE-2024-0939 PoC — Beijing Baichuo Smart S210 Management Platform 代码问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0939.yaml

Associated Vulnerability

Title:Beijing Baichuo Smart S210 Management Platform 代码问题漏洞 (CVE-2024-0939)
Description:Beijing Baichuo Smart S210 Management Platform是中国北京百卓（Beijing Baichuo）公司的一款多业务安全网关智能管理平台。 Beijing Baichuo Smart S210 Management Platform 20240117版本及之前版本存在代码问题漏洞，该漏洞源于对参数 file_upload 的错误操作会导致上传不受限制。

Description

A vulnerability has been found in Byzoro Smart S210 Management Platform up to 20240117 and classified as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to unrestricted upload.

File Snapshot


 id: CVE-2024-0939

info:
  name: Smart S210 Management Platform - Arbitary File Upload
  author: Dhi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!