CVE-2021-26294 PoC — Aurora 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26294.yaml

Associated Vulnerability

Title:Aurora 路径遍历漏洞 (CVE-2021-26294)
Description:Afterlogic Aurora是美国Afterlogic公司的一套使用PHP语言编写的企业邮件服务器平台。该平台包括电子邮箱、文件存储和地址簿管理等功能。 AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9 存在路径遍历漏洞，该漏洞允许通过目录遍历读取文件。

Description

AfterLogic Aurora and WebMail Pro products with 7.7.9 and all lower versions are affected by this vulnerability, simply sending an HTTP GET request to WebDAV EndPoint with built-in “caldav_public_user@localhost” and it’s the predefined password “caldav_public_user” allows the attacker to read all files under the web root.

File Snapshot


 id: CVE-2021-26294

info:
  name: AfterLogic Aurora and WebMail Pro < 7.7.9 - Information Disclosure

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!