CVE-2021-29006 PoC — rConfig 信息泄露漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29006.yaml

Associated Vulnerability

Title:rConfig 信息泄露漏洞 (CVE-2021-29006)
Description:rConfig是一款开源的网络配置管理实用程序。 rConfig 存在安全漏洞，该漏洞源于 rConfig 3.9.6 版本受本地文件泄露漏洞影响。经过身份验证的用户可以成功下载服务器上的任何文件。

Description

rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.

File Snapshot


 id: CVE-2021-29006

info:
  name: rConfig 3.9.6 - Local File Inclusion
  author: r3Y3r53
  severity:

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!