Description
FineCMS5.0.8及版本以下里面有一个down_file函数.可以从远程下载文件到本地服务器.
FineCMS down_file 模块允许远程文件下载
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/weixin_39610229/article/details/115573753
https://www.cnvd.org.cn/flaw/show/CNVD-2017-08868
https://avd.aliyun.com/detail?id=AVD-2021-910259
https://cn-sec.com/archives/68436.html
https://baizesec.github.io/bylibrary/%E6%BC%8F%E6%B4%9E%E5%BA%93/01-CMS%E6%BC%8F%E6%B4%9E/FineCMS/FineCMS_v5.0.8%E4%B8%A4%E5%A4%84getshell/