奥威亚云视频平台 UploadFile.aspx 文件上传漏洞

2024-08-21 奥威亚云视频平台 PoC No

Description

为了满足高校培养人才和教学管理的需求，顺应时代的发展，奥威亚围绕大数据下的学习和教育，推出升级版的高校视频应用云平台。其  UploadFile.aspx 接口存在任意文件上传漏洞，未经身份验证的攻击者可通过该漏洞在服务器端任意执行代码，写入后门，获取服务器权限，进而控制整个 web 服务器。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%A5%A5%E5%A8%81%E4%BA%9A%E8%A7%86%E9%A2%91%E4%BA%91%E5%B9%B3%E5%8F%B0/%E5%A5%A5%E5%A8%81%E4%BA%9A%E4%BA%91%E8%A7%86%E9%A2%91%E5%B9%B3%E5%8F%B0UploadFile.aspx%E5%AD%98%E5%9C%A8%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://github.com/laoa1573/wy876/blob/main/wpoc/%E5%A5%A5%E5%A8%81%E4%BA%9A%E8%A7%86%E9%A2%91%E4%BA%91%E5%B9%B3%E5%8F%B0/%E5%A5%A5%E5%A8%81%E4%BA%9A%E4%BA%91%E8%A7%86%E9%A2%91%E5%B9%B3%E5%8F%B0UploadFile.aspx%E5%AD%98%E5%9C%A8%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/weixin_45790890/article/details/141368617
https://starmap.dbappsecurity.com.cn/info/7047
https://cn-sec.com/archives/3119345.html
https://www.ddpoc.com/DVB-2023-5663.html
https://github.com/zan8in/wy876-POC/blob/main/%E5%A5%A5%E5%A8%81%E4%BA%9A%E8%A7%86%E9%A2%91%E4%BA%91%E5%B9%B3%E5%8F%B0/%E5%A5%A5%E5%A8%81%E4%BA%9A%E4%BA%91%E8%A7%86%E9%A2%91%E5%B9%B3%E5%8F%B0UploadFile.aspx%E5%AD%98%E5%9C%A8%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://gitea.com/Run0nceEx/POC
https://zhuanlan.zhihu.com/p/1932214870562047555
https://www.6cloudtech.com/portal/article/index/id/1291.html
http://16hangbo.com/jsrz/956.html

Description

PoC

References

Related Vulnerabilities