CVE-2024-0305 PoC — Guangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosure

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0305.yaml

Associated Vulnerability

Title:Guangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosure (CVE-2024-0305)
Description:A vulnerability was found in Guangzhou Yingke Electronic Technology Ncast up to 2017 and classified as problematic. Affected by this issue is some unknown functionality of the file /manage/IPSetup.php of the component Guest Login. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249872.

Description

The Ncast Yingshi high-definition intelligent recording and playback system is a newly developed audio and video recording and playback system. The system has RCE vulnerabilities in versions 2017 and earlier.

File Snapshot


 id: CVE-2024-0305

info:
  name: Ncast busiFacade - Remote Command Execution
  author: BMCel
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!