CVE-2020-19360 PoC — FHEM 信息泄露漏洞

Source

https://github.com/a1665454764/CVE-2020-19360

Associated Vulnerability

Title:FHEM 信息泄露漏洞 (CVE-2020-19360)
Description:Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a file, which can lead to sensitive information disclosure.

Description

CVE-2020-19360

Readme

# Fhem FileLog_logWrapper 任意文件读取漏洞 CVE-2020-19360

## 漏洞描述

FHEM在6.0版本中存在文件包含漏洞，该漏洞源于允许FHEM/FileLog_logWrapper file参数允许攻击者包含文件，攻击者可以利用此漏洞导致敏感信息泄露。

## 漏洞影响

FHEM 6.0

## 网络测绘

title=="Home, Sweet Home"

## 漏洞复现
![WAI3J(~0_E~P9OL)E5QFZGS](https://github.com/a1665454764/CVE-2020-19360/assets/143511005/a0a3b971-b68e-4a10-87b7-e5fa4a1614ef)
![89R63M45 QPAM%GUT511GU](https://github.com/a1665454764/CVE-2020-19360/assets/143511005/ea7063b4-d498-4c98-ac60-80cdd9f2edbe)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!