Description
YCCMS是一款采用PHP5+MYSQL做为技术基础进行开发的版轻量级CMS建站系统。YCCMS v3.3中存在代码执行漏洞，漏洞源于未能严格过滤上传的图片类型，攻击者可利用该漏洞执行代码。
YCCMS 3.3 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zhuanlan.zhihu.com/p/717641991
https://www.cnblogs.com/qianxiao996/p/13574601.html
https://nvd.nist.gov/vuln/detail/CVE-2020-20287
https://cve.imfht.com/detail/CVE-2020-20287?lang=en
https://blog.jiguang.xyz/posts/remote-code-execution-via-upload-image/
https://cvefeed.io/vuln/detail/CVE-2020-20287