| Título | Baizhuo Network PatrolFlow PatrolFlow-AM-2530Pro Arbitrary file read vulnerability |
|---|
| Descripción | PatrolFlow-AM-2530Pro Management Platform Arbitrary File Reading Vulnerability in Baizhuo Network Mailsendview.php.
Attackers can exploit vulnerabilities to gain server privileges or cause business impact on the system.
Construct the file parameter by using/boot/phpConfiguration/tb_ Admin.txt, read the login account password. With the account password, you can directly log in to the background or read any file in the system. |
|---|
| Fuente | ⚠️ https://github.com/kpz-wm/cve |
|---|
| Usuario | Anonymous User |
|---|
| Sumisión | 2023-11-26 07:40 (hace 3 años) |
|---|
| Moderación | 2023-12-07 13:49 (11 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 247157 [Byzoro PatrolFlow 2530Pro hasta 20231126 /log/mailsendview.php Archivo recorrido de directorios] |
|---|
| Puntos | 20 |
|---|