Panalog-日志系统 存在文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/zan8in/wy876-POC/blob/main/Panalog/%E5%8C%97%E4%BA%AC%E6%B4%BE%E7%BD%91%E8%BD%AF%E4%BB%B6%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8Panabit-Panalog%E5%A4%A7%E6%95%B0%E6%8D%AE%E6%97%A5%E5%BF%97%E5%AE%A1%E8%AE%A1%E7%B3%BB%E7%BB%9Fsprog_upstatus.php%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://bbs.huaweicloud.com/blogs/422306
• https://rivers.chaitin.cn/blog/cq94ath0lnechd242t0g
• https://blog.csdn.net/2401_86951451/article/details/142150688
• https://github.com/ibaiw/2024Hvv/blob/main/%E5%8C%97%E4%BA%AC%E6%B4%BE%E7%BD%91%E8%BD%AF%E4%BB%B6%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8Panabit-Panalog%E5%A4%A7%E6%95%B0%E6%8D%AE%E6%97%A5%E5%BF%97%E5%AE%A1%E8%AE%A1%E7%B3%BB%E7%BB%9Fsprog_upstatus.php%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(CVE-2024-2014).md
• https://x.threatbook.com/v5/article?threatInfoID=111276
• https://comwrg.github.io/1000php/bugs/wooyun-2016-0168461.html
• https://rivers.chaitin.cn/blog/cq94t010lnechd2447kg

Related Vulnerabilities

• PoCpanabit-applist-rce: Panabit-Panalog log system applist.php command execution
• PoCpanalog-libres-syn-delete-rce: Panalog大数据日志审计系统libres_syn_delete.php存在命令执行
• Panabit Panalog 日志系统 mailcious_down_fornode.php 存在远程命令执行漏洞
• Panalog日志审计系统 sprog_upstatus.php SQL注入漏洞
• Panalog sessiptbl.php 命令注入漏洞
• Panalog sy_query.php 命令注入漏洞
• Panabit-Panalog ipgrp_handle.php SQL注入漏洞
• Panabit Panalog libres_sy_query.php存在命令执行漏洞
• Panabit Panalog libres_syn_delete.php存在命令执行漏洞
• Panabit Panalog sprog_upstatus.php SQL 注入漏洞
• Panabit Panalog CVE-2024-2014 SQL注入漏洞
• Panabit Panalog SQL注入漏洞
• Panalog ajax_ping.php 命令注入漏洞