CVE-2021-26294 PoC — Aurora 路径遍历漏洞

Source

https://github.com/dorkerdevil/CVE-2021-26294

Associated Vulnerability

Title: Aurora 路径遍历漏洞 (CVE-2021-26294)
Description:An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when using the caldav_public_user account (with caldav_public_user as its password).

Description

Directory Traversal in Afterlogic webmail aurora and pro

Readme

# CVE-2021-26294 Exploit
Directory Traversal in Afterlogic webmail aurora and pro .

Description: AfterLogic Aurora and WebMail Pro products with 7.7.9 and all lower versions are affected by this vulnerability, simply sending an HTTP GET request to WebDAV EndPoint with built-in “caldav_public_user@localhost” and it’s the predefined password “caldav_public_user” allows the attacker to read all files under the web root.

## Usage  
```bash
python3 CVE-2021-26294.py http(s)://target:port
```

## Author
[D0rkerDevil](https://twitter.com/D0rkerDevil)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →