Description
管家婆订货易·无缝对接管家婆ERP的订货商城系统，集合PC商城+微信商城+小程序商城+APP商城+触屏版商城；管家婆订货易在线订货商城系统存在任意文件上传漏洞，攻击者可向服务器未授权上传任意文件
管家婆订货易在线订货商城系统 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/%E4%BB%BB%E6%88%91%E8%A1%8C-%E7%AE%A1%E5%AE%B6%E5%A9%86-%E8%AE%A2%E8%B4%A7%E6%98%93%E5%9C%A8%E7%BA%BF%E5%95%86%E5%9F%8E-SelectImage.aspx-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://www.ddpoc.com/DVB-2024-6236.html
https://cn-sec.com/archives/2289946.html
https://www.aqtd.com/nd.jsp?id=7929