Description
Musical World存在任意文件上传漏洞，此漏洞是缺乏校验导致的。
Musical World CVE-2022-27064 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2022-27064
https://cve.yack.one/cve/CVE-2022-27064
https://socradar.io/free-tools/cve-radar/CVE-2022-27064
https://vulmon.com/vulnerabilitydetails?qid=CVE-2022-27064&scoretype=epss
http://opencve.cisoteria.com/cve/CVE-2022-27064
https://sploitus.com/exploit?id=1337DAY-ID-37608
https://github.com/D4rkP0w4r/Musical-World-Unrestricted-File-Upload-RCE-POC
http://packetstormsecurity.com/files/166653/Musical-World-1-Shell-Upload.html