Sunlogin Sunflower Simplified 路径遍历漏洞

Sunlogin Sunflower is a remote control software from the Chinese company Sunlogin. A security vulnerability exists in Sunlogin Sunflower Simplified version 1.0.1.43315, which stems from the presence of path traversal, and allows remote and unauthenticated attackers to execute arbitrary programs o...

VulnCheck KEV: CVE-2022-48323

Sunlogin Sunflower Simplified aka Sunflower Simple and Personal 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the...