CVE-2020-15492 PoC — INNEO Solutions INNEO Startup TOOLS 2018 M040 路径遍历漏洞

Description

This repository holds the advisory, exploits and vulnerable software of the CVE-2020-15492

介绍

# CVE-2020-15492

This vulnerablity was discovered and disclosed by me. This repository will hold the advisory, exploits and the setup executable of the vulnerable software for one to experiment with this vulnerability.

This repository is only for educational purposes.

# Links

- [Advisory SYSS-2020-028](https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-028.txt)
- [SySS Blog entry](https://www.syss.de/pentest-blog/2020/syss-2020-028-sicherheitsschwachstelle-in-inneo-startup-tools-2017-und-2018/)
- [Exploit on Exploit-DB](https://www.exploit-db.com/exploits/48693)
- [Vendor notice](https://www.inneo.de/files/content/Produktentwicklung/Tools-und-Erweiterungen/Startup-TOOLS/INNEO-SA-SUT-2020-01.pdf)
- [MITRE Entry](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15492)
- [NVD Entry](https://nvd.nist.gov/vuln/detail/CVE-2020-15492)

文件快照

备注