References https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/PowerCreatorCms/PowerCreatorCms%E4%BB%BB%E6%84%8F%E4%B8%8A%E4%BC%A0/ https://blog.51cto.com/sfsec/3813832 https://cn-sec.com/archives/2980924.html https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/PowerCreator/PowerCreator%E6%8E%A5%E5%8F%A3UploadResourcePic.ashx%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://www.ddpoc.com/DVB-2024-7459.html https://avd.aliyun.com/detail?id=AVD-2021-898676 https://cn-sec.com/archives/2987586.html https://disk.scan.cm/All_wiki/yougar0.github.io%28%E5%9F%BA%E4%BA%8E%E9%9B%B6%E7%BB%84%E5%85%AC%E5%BC%80%E6%BC%8F%E6%B4%9E%E5%BA%93%20%2B%20PeiQi%E6%96%87%E5%BA%93%E7%9A%84%E4%B8%80%E4%BA%9B%E6%BC%8F%E6%B4%9E%29-20210715/Web%E5%AE%89%E5%85%A8/PowerCreatorCms/PowerCreatorCms%E4%BB%BB%E6%84%8F%E4%B8%8A%E4%BC%A0.md
Related VulnerabilitiesPoChjsoft-uploadlogo-fileupload: 宏景人力资源信息管理系统 uploadLogo 任意文件上传PoCpowercreator-arbitrary-file-upload: Powercreator Arbitrary file uploadPoCpowercreator-cms-rce: PowerCreator CMS - Remote Code ExecutionPoC宏景人力资源信息管理系统uploadLogo存在任意文件上传漏洞宏景 人力资源信息管理系统 uploadLogo 未授权 文件上传限制不当漏洞宏景人力资源信息管理系统 uploadLogo 任意文件上传漏洞PowerCreator-CMS UploadResourcePic.ashx存在任意文件上传漏洞PoC广联达OA uploadLogo.aspx 任意文件上传漏洞联达OA Hosp_Portal-uploadLogo存在任意文件上传漏洞PoC联达OA uploadLogo.aspx任意文件上传金蝶 EAS uploadLogo.action 接口文件上传漏洞金蝶EAS /uploadLogo.action 路径存在任意文件上传漏洞