CVE-2023-4542 PoC — D-Link DAR-8000 操作系统命令注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4542.yaml

Associated Vulnerability

Title:D-Link DAR-8000 操作系统命令注入漏洞 (CVE-2023-4542)
Description:D-Link DAR-8000是中国友讯（D-Link）公司的上网行为审计网关。 D-Link DAR-8000-10版本存在操作系统命令注入漏洞，该漏洞源于文件/app/sys1.php的参数id会导致操作系统命令注入。

Description

D-Link DAR-8000-10 version has an operating system command injection vulnerability. The vulnerability originates from the parameter id of the file /app/sys1.php which can lead to operating system command injection.

File Snapshot


 id: CVE-2023-4542

info:
  name: D-Link DAR-8000-10 - Command Injection
  author: pussycat0x
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!