{
  "Name": "shterm fortress machine worksheet_check.php rce",
  "Description": "shterm fortress machine worksheet_check.php file, permission check is not performed, resulting in no need to log in and you can access the page. Variable filtering is not strict, leading to remote command execution vulnerabilities.",
  "Product": "shterm-Fortres-Machine",
  "Homepage": "http://www.shterm.com/",
  "DisclosureDate": "2019-11-13",
  "Author": "itardc@163.com",
  "FofaQuery": "app=shterm-Fortres-Machine || (title=\"shterm\")",
  "Level": "3",
  "Impact": "",
  "Recommendation": "",
  "References": [
    "http://fofa.so"
  ],
  "HasExp": true,
  "ExpParams": null,
  "ExpTips": {
    "Type": "",
    "Content": ""
  },
  "ScanSteps": null,
  "ExploitSteps": null,
  "Tags": ["rce"],
  "CVEIDs": null,
  "CVSSScore": null,
  "AttackSurfaces": {
    "Application": null,
    "Support": null,
    "Service": null,
    "System": null,
    "Hardware": ["shterm-Fortres-Machine"]
  }
}