Sangfor NGAF - loadfile.php File Read

Reads arbitrary files via Sangfor Next Gen Application Firewall /svpnhtml/loadfile.php file parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Sangfor NGAF loadfile.php arbitrary file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from...

CVE-2023-30804

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpnhtml/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated...

CVE-2023-30804: Improper Limitation of a Pathname to a Restricted Directory

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpnhtml/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated...

VulnCheck KEV: CVE-2023-30804

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpnhtml/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated...