CVE-2021-28151 PoC — Hongdian H8922 操作系统命令注入漏洞

Source

https://github.com/Threekiii/Awesome-POC/blob/master/%E7%BD%91%E7%BB%9C%E8%AE%BE%E5%A4%87%E6%BC%8F%E6%B4%9E/%E5%AE%8F%E7%94%B5%20H8922%20%E5%90%8E%E5%8F%B0%E7%AE%A1%E7%90%86%E5%91%98%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E%20CVE-2021-28151.md

Associated Vulnerability

Title: Hongdian H8922 操作系统命令注入漏洞 (CVE-2021-28151)
Description:Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →