CVE-2021-37704 PoC — phpfastcache 信息泄露漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37704.yaml

Associated Vulnerability

Title:phpfastcache 信息泄露漏洞 (CVE-2021-37704)
Description:phpfastcache是一套后端缓存系统。 PhpFastCache存在信息泄露漏洞，该漏洞源于软件对于"vendor"目录缺乏有效的访问保护，导致攻击者可以访问"phpinfo()"。

Description

phpinfo() is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache.

File Snapshot


 id: CVE-2021-37704

info:
  name: phpfastcache - phpinfo Resource Exposure
  author: whoever
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!