References https://github.com/Threekiii/Awesome-POC/blob/master/CMS%E6%BC%8F%E6%B4%9E/%E7%8B%AE%E5%AD%90%E9%B1%BCCMS%20wxapp.php%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://www.modb.pro/db/75702 https://github.com/tzwlhack/Vulnerability/blob/main/%E7%8B%AE%E5%AD%90%E9%B1%BC%E7%A4%BE%E5%8C%BA%E5%9B%A2%E8%B4%AD%E7%B3%BB%E7%BB%9F%20wxapp.php%20%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://wiki.timlzh.com/Qingy-Wiki/Web%E5%AE%89%E5%85%A8/%E7%8B%AE%E5%AD%90%E9%B1%BC%E7%A4%BE%E5%8C%BA%E5%9B%A2%E8%B4%AD%E7%B3%BB%E7%BB%9F/%E7%8B%AE%E5%AD%90%E9%B1%BC%E7%A4%BE%E5%8C%BA%E5%9B%A2%E8%B4%AD%E7%B3%BB%E7%BB%9FCMS%E5%AD%98%E5%9C%A8%E4%B8%A4%E5%A4%84%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E/%E7%8B%AE%E5%AD%90%E9%B1%BC%E7%A4%BE%E5%8C%BA%E5%9B%A2%E8%B4%AD%E7%B3%BB%E7%BB%9FCMS%E5%AD%98%E5%9C%A8%E4%B8%A4%E5%A4%84%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.html https://www.ddpoc.com/DVB-2021-2463.html https://www.saury.net/comprehensive/docs/cms-poc https://blog.csdn.net/qq_35938621/article/details/123825394 https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/cms/%E7%8B%AE%E5%AD%90%E9%B1%BCCMS-image_upload.php-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md https://jiwo.org/ken/detail.php?id=3375 https://www.cnblogs.com/Domren/articles/19079760 https://disk.scan.cm/All_wiki/%E4%BD%A9%E5%A5%87PeiQi-WIKI-POC-2021-7-20%E6%BC%8F%E6%B4%9E%E5%BA%93/PeiQi_Wiki/CMS%E6%BC%8F%E6%B4%9E/%E7%8B%AE%E5%AD%90%E9%B1%BCCMS/%E7%8B%AE%E5%AD%90%E9%B1%BCCMS%20wxapp.php%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md?hash=zE0KEPGJ https://www.ddpoc.com/DVB-2021-2691.html https://github.com/SleepingBag945/dddd/blob/main/Update.md https://github.com/myh0st/scripts/blob/master/lionfish-cms-wxapp-php-upload.py
Related VulnerabilitiesPoClionfish-cms-wxapp-php-upload: 狮子鱼 CMS 任意文件上传万能门店小程序管理系统 /api/wxapps/doPageGuiz SQL 注入漏洞万能门店小程序管理系统 /api/wxapps/doPageGetFormCon SQL 注入漏洞万能门店小程序管理系统 /api/wxapps/doPageptpinfo SQL 注入漏洞万能门店小程序管理系统 /api/wxapps/dopageduoproductsinfo SQL 注入漏洞万能门店小程序管理系统 /api/wxapps/dopagefxcount SQL 注入漏洞万能门店小程序管理系统 /api/wxapps/dopagefxszhongx SQL 注入漏洞万能门店小程序管理系统 /api/wxapps/doPagemycoupon SQL 注入漏洞