.. / CVE-2016-5674

• RCE
• Nuclei
• Web

Exploit for NUUO NVR camera `debugging_center_utils_.php` - Command Execution (CVE-2016-5674)

Description:

debugging_center_utils_.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.

Nuclei Template

View the template here CVE-2016-5674.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2016/CVE-2016-5674.yaml

References: