References https://github.com/adysec/POC/blob/main/wpoc/PowerCreator/PowerCreator%E6%8E%A5%E5%8F%A3UploadResourcePic.ashx%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/PowerCreatorCms/PowerCreatorCms%E4%BB%BB%E6%84%8F%E4%B8%8A%E4%BC%A0/ https://www.cnvd.org.cn/flaw/show/CNVD-2017-07290 https://www.ddpoc.com/DVB-2024-7459.html https://avd.aliyun.com/detail?id=AVD-2021-898676 https://cn-sec.com/archives/2980924.html https://disk.scan.cm/All_wiki/yougar0.github.io%28%E5%9F%BA%E4%BA%8E%E9%9B%B6%E7%BB%84%E5%85%AC%E5%BC%80%E6%BC%8F%E6%B4%9E%E5%BA%93%20%2B%20PeiQi%E6%96%87%E5%BA%93%E7%9A%84%E4%B8%80%E4%BA%9B%E6%BC%8F%E6%B4%9E%29-20210715/Web%E5%AE%89%E5%85%A8/PowerCreatorCms/PowerCreatorCms%E4%BB%BB%E6%84%8F%E4%B8%8A%E4%BC%A0.md https://github.com/emadshanab/goby-poc/blob/main/PowerCreator-CMS-Arbitrary-File-Upload.json https://s4e.io/tools/powercreator-cms-remote-code-execution https://cn-sec.com/archives/2987586.html
Related VulnerabilitiesPoCpowercreator-arbitrary-file-upload: Powercreator Arbitrary file uploadPoCpowercreator-cms-rce: PowerCreator CMS - Remote Code ExecutionPowerCreator-CMS UploadResourcePic.ashx存在任意文件上传漏洞PowerCreator CMS UploadLogo.ashx 任意文件上传漏洞PowerCreatorCMS /CatalogCourse.aspx 路径存在SQL注入漏洞PowerCreator CMS ShowResourceSkillComment.aspx-SQL注入Powercreator CatalogCourse.aspx-SQL注入PowerCreator CMS OpenPublicCourse.aspx-SQL注入PowerCreator在线教学系统 CatalogCourse.aspx-SQL注入PowerCreator CMS系统uploadlogo.ashx文件-任意文件上传