CVE-2020-19360 PoC — FHEM 信息泄露漏洞

Source

https://github.com/zzzz966/CVE-2020-19360

Associated Vulnerability

Title: FHEM 信息泄露漏洞 (CVE-2020-19360)
Description:Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure.

Description

Fhem任意文件读取poc

Readme

# CVE-2020-19360
Fhem任意文件读取poc  

# FOFA搜索  
title=="Home, Sweet Home"  

# Usage:  
  python3 Fhem.py -h  
  python3 Fhem.py -u http://www.example.com 单个url测试  
  python3 Fhem.py -f url.txt 批量检测  

# 提示  
完成扫描后会在目录内自动生成存在漏洞的vulable.txt文件

# 免责声明

由于传播、利用此文所提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，作者不为此承担任何责任。

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →