管理易 FileUpload 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/adysec/POC/blob/main/wpoc/eking%E7%AE%A1%E7%90%86%E6%98%93/eking%E7%AE%A1%E7%90%86%E6%98%93FileUpload%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://github.com/ibaiw/2024Hvv/blob/main/eking%E7%AE%A1%E7%90%86%E6%98%93FileUpload%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://starmap.dbappsecurity.com.cn/info/6540
• http://www.wwlib.cn/index.php/artread/artid/10921.html
• https://github.com/hackoadmin/POC2/blob/main/eking%E7%AE%A1%E7%90%86%E6%98%93/eking%E7%AE%A1%E7%90%86%E6%98%93Html5Upload%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://cn-sec.com/archives/3025387.html

Related Vulnerabilities

• 东胜物流软件 /Account/Chfee_payapplication/FileUpload 文件上传漏洞
• 锐明技术Crocus系统 DeviceFileUpload.do 文件读取漏洞
• 锐明技术 Crocus系统 DeviceFileUpload.do 任意文件读取漏洞
• 锐捷EWEB路由器 /ddi/server/fileupload.php 文件上传漏洞
• 锐明技术Crocus系统 DeviceFileUpload.do 任意文件读取漏洞
• MagicINFO SWUpdateFileUploader 文件上传漏洞
• dahua-bitmap-fileupload: 大华智慧园区综合管理平台bitmap接口存在任意文件上传
• e-weaver-eoffice-webservice-upload-fileupload: E-Weaver EOffice webservice upload file upload
• jeecgboot-commoncontroller-parserxml-fileupload: Jeecgboot commonController parserXml fileupload