CVE-2015-7245 PoC — D-Link DVG-N5402SP 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7245.yaml

Associated Vulnerability

Title:D-Link DVG-N5402SP 路径遍历漏洞 (CVE-2015-7245)
Description:D-Link DVG-N5402SP是友讯（D-Link）公司的一款通过IP网络进行语音、传真和共享无线互联网的无线路由器产品。使用W1000CN00、W1000CN03、W2000EN00D版本固件的D-Link DVG-N5402SP中存在目录遍历漏洞。远程攻击者可利用该漏洞获取敏感信息。

Description

D-Link DVG-N5402SP is susceptible to local file inclusion in products with firmware W1000CN-00, W1000CN-03, or W2000EN-00. A remote attacker can read sensitive information via a .. (dot dot) in the errorpage parameter.

File Snapshot


 id: CVE-2015-7245

info:
  name: D-Link DVG-N5402SP - Local File Inclusion
  author: 0x_Akoko
  seve

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!