Description
FastAdmin存在文件上传漏洞, 低权限用户可利用该漏洞获取服务器权限。
FastAdmin /upload 低权限用户任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cloud.tencent.com/developer/article/1818271
https://zhuanlan.zhihu.com/p/370194820
http://www.xcxan.cn/archives/288
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/FastAdmin/FastAdmin%20%E4%BC%9A%E5%91%98%E4%B8%AD%E5%BF%83%E5%89%8D%E5%8F%B0getshell/
https://cn-sec.com/archives/2113378.html
https://ask.fastadmin.net/question/27824.html
https://nosec.org/m/share/4713.html
https://github.com/advisories/GHSA-rc7g-prg9-344f