[Vulnerability Recurrence] Any file upload vulnerability at the front desk of Dahua Smart Park Integrated Management Platform


Preface

The Dahua Smart Park Integrated Management Platform has a front-end arbitrary file upload vulnerability. An attacker can obtain sensitive server information through a specific payload, and then obtain server control permissions.

statement

Please do not use the relevant technologies in this article to engage in illegal testing. Any direct or indirect consequences and losses caused by the dissemination and use of the information or tools provided in this article are the responsibility of the user himself. All adverse consequences and The author of the article is irrelevant. This article is for educational purposes only.

1. Introduction

Dahua Smart Park Integrated Management Platform is a comprehensive management solution developed by Dahua Technology Co., Ltd. (Dahua Technology). The platform is designed to help park managers improve management efficiency, improve safety levels, optimize resource utilization, and achieve intelligent park operations. The Dahua Smart Park comprehensive management platform adopts modular design and open architecture, and can be customized and expanded according to the needs of different parks. At the same time, it also supports cloud deployment and mobile access, allowing managers to monitor park operations anytime and anywhere.

2. Scope of influence

大华智慧园区综合管理平台

Insert image description here

3. Asset search

Guess you like

Origin blog.csdn.net/weixin_46944519/article/details/132856535