CVE-2020-14947 PoC — OCS Inventory NG 操作系统命令注入漏洞

Source

https://github.com/mhaskar/CVE-2020-14947

Associated Vulnerability

Title: OCS Inventory NG 操作系统命令注入漏洞 (CVE-2020-14947)
Description:OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mib_file in plugins/main_sections/ms_config/ms_snmp_config.php is mishandled in get_mib_oid.

Description

The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947

Readme

# CVE-2020-14947
The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947

![exploit image](OCSNG-RCE.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →