Description
亿赛通中存在任意文件上传漏洞，此漏洞是由于uploadFile接口未充分验证用户输入的数据所导致的。
亿赛通 hiddenWatermark uploadFile任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/zan8in/pocwiki/blob/main/%E4%BA%BF%E8%B5%9B%E9%80%9A%E7%94%B5%E5%AD%90%E6%96%87%E6%A1%A3%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9FhiddenWatermark%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://peiqif4ck.github.io/codeaudit/2023/09/articles/2d6e04e436b4b308/
https://www.cnblogs.com/fuchangjiang/p/17718497.html
https://www.ihonker.com/thread-32698-1-1.html
https://blog.luckytain.com/?p=137
https://zhuanlan.zhihu.com/p/651945065
https://stack.chaitin.com/vuldb/detail/78e7fc88-914c-4995-b1ff-f5df7718494d
https://www.sxxdckj.com/cms/a/yi-sai-tong-dian-zi-wen-dang-an-quan-guan-li-xi-tong-cun-zai-wen-jian-shang-chuan-lou-dong-CNVD-2022-91374.html
https://avd.aliyun.com/detail?id=AVD-2023-1678171
https://blog.csdn.net/wpf416533938/article/details/135064956