CVE-2021-27132 PoC — Sercomm AG Combo VD625 AGSOT 注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27132.yaml

Associated Vulnerability

Title:Sercomm AG Combo VD625 AGSOT 注入漏洞 (CVE-2021-27132)
Description:Sercomm AG Combo VD625 AGSOT是中国Sercomm公司的一个应用程序。提供了全面的电信宽带解决方案。 SerComm AG Combo VD625 AGSOT_2.1.0 存在注入漏洞，该漏洞允许CRLF注入。

Description

Sercomm AGCOMBO VD625 Smart Modems with firmware version AGSOT_2.1.0 are vulnerable to Carriage Return Line Feed (CRLF) injection via the Content-Disposition header.

File Snapshot


 id: CVE-2021-27132

info:
  name: Sercomm VD625 Smart Modems - CRLF Injection
  author: geeknik
  se

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!