| tiêu đề | cym1102 nginxWebUI <=3.9.9 Remote Code Execution |
|---|
| Mô tả | nginxWebUI is a graphical tool for managing nginx configurations. It allows users to quickly configure various functionalities of nginx using a web interface, including HTTP protocol forwarding, TCP protocol forwarding, reverse proxy, load balancing, static HTML server, automatic application, renewal, and configuration of SSL certificates. Once configured, it can generate the nginx.conf file with a single click, and also control the startup and reloading of nginx using this file, providing a complete graphical control loop for managing nginx.
In versions <=3.9.9, there are multiple ways to achieve remote code execution (RCE) in the backend. Three of these methods are bypasses from previous versions. |
|---|
| Nguồn | ⚠️ https://github.com/cym1102/nginxWebUI/issues/138、https://github.com/cym1102/nginxWebUI/files/14818455/nginxwebui.rce.3.9.9.pdf |
|---|
| Người dùng | qqwp220 (UID 67158) |
|---|
| Đệ trình | 05/04/2024 16:18 (cách đây 3 những năm) |
|---|
| Kiểm duyệt | 12/04/2024 21:33 (7 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 260579 [cym1102 nginxWebUI đến 3.9.9 /adminPage/conf/reload exec nginxExe nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|