admin/GobyVuls
1
0 Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2026-10-28 19:40:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9 from corp0ra1/master

Browse Source 
add CVE-2021-3378
This commit is contained in:
tardc authored and GitHub committed 2021-07-22 17:39:24 +08:00
2 parents ba36cfb71e a5720964c3
commit 208ae11369
2 files changed
+9
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

FortiLogger/CVE-2021-3378/CVE_2021_3378.gif
BIN
View File
Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 1.2 MiB

FortiLogger/CVE-2021-3378/README.md
+9
View File
@@ -0,0 +1,9 @@
# FortiLogger Unauth Arbitrary File Upload(CVE_2021_3378)
FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a \"Content-Type: image/png\" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.
**FOFA query rule**: [app="Fortilogger-|-Log-and-Report-System"](https://fofa.so/result?qbase64=YXBwPSJGb3J0aWxvZ2dlci18LUxvZy1hbmQtUmVwb3J0LVN5c3RlbSI%3D)
# Demo
![](CVE_2021_3378.gif)