CVE-2017-16806 PoC — Ulterius 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16806.yaml

Associated Vulnerability

Title:Ulterius 路径遍历漏洞 (CVE-2017-16806)
Description:Ulterius是一套远程控制管理工具。 Ulterius 1.9.5.0之前的版本中RemoteTaskServer/WebServer/HttpServer.cs文件的‘Process’函数存在目录遍历漏洞。攻击者可利用该漏洞下载文件。

Description

Ulterius Server before 1.9.5.0 allows HTTP server directory traversal via the process function in RemoteTaskServer/WebServer/HttpServer.cs.

File Snapshot


 id: CVE-2017-16806

info:
  name: Ulterius Server < 1.9.5.0 - Directory Traversal
  author: geeknik


...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!