Description
FastAdmin是一款基于ThinkPHP和Bootstrap的后台开发框架、开放会员中心的站点，上传特定文件可直接GetShell。
FastAdmin usercenter 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/tzwlhack/Vulnerability/blob/main/FastAdmin%20%E6%A1%86%E6%9E%B6%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
https://nosec.org/m/share/4713.html
https://cnpanda.net/codeaudit/777.html
http://www.xcxan.cn/archives/288
https://www.cnvd.org.cn/flaw/show/CNVD-2021-90404
https://disk.scan.cm/All_wiki/yougar0.github.io%28%E5%9F%BA%E4%BA%8E%E9%9B%B6%E7%BB%84%E5%85%AC%E5%BC%80%E6%BC%8F%E6%B4%9E%E5%BA%93%20%2B%20PeiQi%E6%96%87%E5%BA%93%E7%9A%84%E4%B8%80%E4%BA%9B%E6%BC%8F%E6%B4%9E%29-20210715/Web%E5%AE%89%E5%85%A8/FastAdmin/FastAdmin%20%E5%89%8D%E5%8F%B0%E5%88%86%E7%89%87%E4%BC%A0%E8%BE%93%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://brands.cnblogs.com/tencentcloud/p/9895
https://zhuanlan.zhihu.com/p/370194820
https://exp1orer.github.io/2021/04/02/FastAdmin%E5%89%8D%E5%8F%B0%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0/