可道云KodBox 后台存在任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cn.t00ls.com/articles-64994.html
• https://github.com/zan8in/wy876-POC
• https://github.com/tzwlhack/Vulnerability
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://cve.imfht.com/intel/470460?lang=en
• https://app.opencve.io/cve/?vendor=kodcloud
• https://github.com/kalcaddle/kodbox/blob/main/ChangeLog.md

Related Vulnerabilities

• PoCkodbox-installer: Kodbox Installation Page - Exposure
• Kalcaddle Kodbox CVE-2023-6848 命令注入漏洞
• 可道云KodBox 存在弱口令漏洞
• 可道云KodBox 存在任意文件读取漏洞
• 可道云KodBox 存在用户名枚举漏洞(CVE-2023-48028)
• 可道云KodBox 管理员添加存在鉴权绕过漏洞
• 可道云KodBox 存在SSRF漏洞