Awesome-POC/网络设备漏洞/惠尔顿 e地通 config.xml 信息泄漏漏洞.md
2024-11-06 14:10:36 +08:00

27 lines
461 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 惠尔顿 e地通 config.xml 信息泄漏漏洞
## 漏洞描述
惠尔顿 e地通Socks5 VPN登录系统 存在信息泄漏漏洞访问特殊的Url即可获取管理员账号密码
## 漏洞影响
```
惠尔顿 e地通Socks5 VPN登录系统
```
## 网络测绘
```
app="惠尔顿-e地通VPN"
```
## 漏洞复现
登录页面
![img](images/202202162228884.png)
访问 **/backup/config.xml** 泄漏用户信息
![img](images/202202162228756.png)