漏洞描述
Edraw PDF Viewer Component是轻型的ActiveX空间，允许应用程序显示和操作PDF文件 。 PDFVIEWER.PDFViewerCtrl.1 ActiveX控件(pdfviewer.ocx)所提供的FtpDownloadFile()方式没有正确地验证用户所提供的输入参数，如果用户受骗访问了恶意网页，就可能向系统上的任意位置下载文件 。
Edraw PDF Viewer Component "pdfviewer.ocx" 任意文件上传漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-34427: Eclipse BIRT Viewer - Remote Code Execution
- POC gradio-image-ssrf: Gradio Image Component - Server-Side Request Forgery
- 蓝凌OA /sys/ui/sys_ui_component/sysUiComponent.do 命令执行漏洞
- POC CVE-2008-6172: Joomla! Component RWCards 3.0.11 - Local File Inclusion
- POC CVE-2010-0157: Joomla! Component com_biblestudy - Local File Inclusion
- POC CVE-2010-0467: Joomla! Component CCNewsLetter - Local File Inclusion
- POC CVE-2010-0696: Joomla! Component Jw_allVideos - Arbitrary File Retrieval
- POC CVE-2010-0942: Joomla! Component com_jvideodirect - Directory Traversal
- POC CVE-2010-0943: Joomla! Component com_jashowcase - Directory Traversal
- POC CVE-2010-0944: Joomla! Component com_jcollection - Directory Traversal
- POC CVE-2010-0972: Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion
- POC CVE-2010-0982: Joomla! Component com_cartweberp - Local File Inclusion
- POC CVE-2010-0985: Joomla! Component com_abbrev - Local File Inclusion