深信服SSLVPN /por/checkurl.csp 路径存在远程命令执行

2023-03-13 深信服

Description

Sangfor VDI can effectively improve deployment efficiency simplify the workload of desktop operation and maintenance while ensuring information security and realizing the smoothness of mobile office. tackers can use this vulnerability to arbitrarily execute code on the server side, write backdoors, obtain server permissions and then control the entire web server.

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

Related Vulnerabilities