Description
KafooeyBlog 1.55b版本的lib/image_upload.php中存在无限制文件上传漏洞。远程攻击者通过上传一个具有可执行扩展名的文件并通过对该文件提交一个直接请求来读取，以执行任意代码。
BLOG 'image_upload.php' 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/cms/%E7%8B%AE%E5%AD%90%E9%B1%BCCMS-image_upload.php-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
https://blog.csdn.net/qq_36334672/article/details/137110982
https://cn-sec.com/archives/2945139.html
https://www.exploit-db.com/exploits/7537
https://cxsecurity.com/cveshow/CVE-2008-5732/
https://www.ddpoc.com/DVB-2021-2691.html