CVE-2020-8209 PoC — Citrix Systems XenMobile Server 路径遍历漏洞

Source

https://github.com/B1anda0/CVE-2020-8209

Associated Vulnerability

Title: Citrix Systems XenMobile Server 路径遍历漏洞 (CVE-2020-8209)
Description:Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files.

Description

该脚本为Citrix XenMobile 目录遍历漏洞（CVE-2020-8209）批量检测脚本。

Readme

# 使用方法&免责声明



该脚本为Citrix XenMobile 目录遍历漏洞（CVE-2020-8209）批量检测脚本。

使用方法：Python  CVE-2020-8209-Multiple.py  url.txt

存在漏洞的地址输出在vul.txt中



##### 影响版本：

- RP2之前的Citrix XenMobile Server 10.12

- RP4之前的Citrix XenMobile Server 10.11

- RP6之前的Citrix XenMobile Server 10.10

- RP5之前的Citrix XenMobile Server 10.9

  

工具仅用于安全人员安全测试，任何未授权检测造成的直接或者间接的后果及损失，均由使用者本人负责

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →