admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-05 10:16:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/Chemex/CNVD-2021-15573
History
xiaoheihei1107 680d2239ee
Add CNVD-2021-15573
2021-09-24 17:55:11 +08:00
..
Chemex_Auth_File_Upload_CNVD_2021_15573.gif
Add CNVD-2021-15573
2021-09-24 17:55:11 +08:00
README.md
Add CNVD-2021-15573
2021-09-24 17:54:47 +08:00

README.md

Chemex Auth File Upload CNVD-2021-15573

Coffee pot Chemex is a free, open source, efficient and beautiful IT operation and maintenance management platform. Chemex has a background file upload vulnerability(default login admin:admin), which can be exploited by attackers to gain control of the server.

FOFA query rule: (title="咖啡壶" || body="让IT资产管理更加简单") && body="CreateDcat"

Demo

Chemex_Auth_File_Upload_CNVD_2021_15573