References https://blog.csdn.net/jingke666/article/details/140855251 https://cloud.tencent.com/developer/article/2443507 https://www.ddpoc.com/DVB-2024-7725.html https://www.secevery.com/toBugInfo?id=1818476137731497985 https://github.com/Sec-Fork/POC-20250106/blob/main/LiveBOS/%E7%81%B5%E5%8A%A8%E4%B8%9A%E5%8A%A1%E6%9E%B6%E6%9E%84%E5%B9%B3%E5%8F%B0(LiveBOS)%E7%B3%BB%E7%BB%9FUploadImage.do%E6%8E%A5%E5%8F%A3%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(XVE-2024-18835).md https://github.com/dontian122/POC/blob/main/LiveBOS/%E7%81%B5%E5%8A%A8%E4%B8%9A%E5%8A%A1%E6%9E%B6%E6%9E%84%E5%B9%B3%E5%8F%B0(LiveBOS)%E7%B3%BB%E7%BB%9FUploadImage.do%E6%8E%A5%E5%8F%A3%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(XVE-2024-18835).md https://cn-sec.com/archives/3041179.html https://www.cnvd.org.cn/flaw/show/CNVD-2024-23722
Related VulnerabilitiesPoClivebos-showimage-fileread: LiveBOS ShowImage.do 任意文件读取漏洞PoClivebos-uploadfile-do-fileupload: LiveBOS UploadFile.do 任意文件上传漏洞(XVE-2023-21708)PoClivebos-file-read: LiveBOS ShowImage.do - Arbitrary File Read云课网校系统 /api/uploader/uploadImage 文件上传漏洞LiveBos 数据库文件泄露漏洞云课网校 /index/forum/uploadImage 任意文件上传漏洞LiveBOS /feed/UploadFile.do;.css.jsp 文件上传漏洞顶点软件 LiveBOS /feed/UploadImage.do 存在任意文件上传漏洞LiveBOS /feed/UploadFile.do;.js.jsp 文件上传漏洞LiveBOS UploadFile.do 任意文件上传漏洞