CVE-2018-7669 PoC — Sitecore Sitecore.NET Log Viewer应用程序路径遍历漏洞

Source

https://github.com/palaziv/CVE-2018-7669

Associated Vulnerability

Title:Sitecore Sitecore.NET Log Viewer应用程序路径遍历漏洞 (CVE-2018-7669)
Description:Sitecore Sitecore.NET是丹麦Sitecore公司的一套基于.NET的网站内容管理系统。Log Viewer application是其中的一个日志查看应用程序。 Sitecore Sitecore.NET 8.1及之前版本中的Log Viewer应用程序存在目录遍历漏洞。攻击者可借助sitecore/shell/default.aspx?xmlcontrol=LogViewerDetails&file= URI利用该漏洞访问任意文件。

Description

Quick and dirty bruteforcer for CVE-2018-7669 (Directory Traversal Vulnerability in Sitecore)

Readme

# CVE-2018-7669
Quick and dirty bruteforcer for CVE-2018-7669 (Directory Traversal Vulnerability in Sitecore)

Usage: `./bruteforce.py https://target.com PotentialWebsiteName1 PotentialWebsiteName2 127.0.0.1:8080`

File Snapshot


 [4.0K]  /data/pocs/b9d435e519c5dbce5cb908a047ad285202cf4b6f
├── [3.0K]  bruteforce.py
├── [1.2K]  LICENSE
└── [ 214]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!