CVE-2018-14933 PoC — NUUO NVRmini 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14933.yaml

Associated Vulnerability

Title:NUUO NVRmini 安全漏洞 (CVE-2018-14933)
Description:NUUO NVRmini是美国NUUO公司的一款视频存储管理设备。 NUUO NVRmini中的upgrade_handle.php文件存在安全漏洞。远程攻击者可借助‘writeuploaddir’参数中的shell元字符。远程攻击者可利用该漏洞执行命令

Description

NUUO NVRmini is vulnerable to unauthenticated remote command execution through the upgrade_handle.php file. The vulnerability allows an attacker to execute arbitrary commands by manipulating the uploaddir parameter.

File Snapshot


 id: CVE-2018-14933

info:
  name: NUUO NVRmini - Remote Command Execution
  author: ritikchaddha
  s

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!