九麒科技 大蚂蚁通讯系统 plus_get_favicon 文件上传限制不当漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://mrxn.net/jswz/bigant-plus_get_favicon-upload.html
• https://www.gm7.org/archives/44794
• https://www.gm7.org/archives/51596
• https://www.bigant.cn/article/news/435.html
• https://zone.ci/e/tags/?tagname=plus_get_favicon%E6%8E%A5%E5%8F%A3
• https://github.com/Mr-xn/Penetration_Testing_POC/blob/master/README.md

Related Vulnerabilities

• 九麒科技 大蚂蚁通讯系统 PublicController 需授权 访问控制不当漏洞