Description
Pakupaku CMS 0.4版本及其早期版本的index.php中存在不限制文件上传漏洞。远程攻击者可以借助一个上传操作，上传并执行uploads/的任意PHP文件。
Pakupaku CMS 'index.php'任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2007-4640
https://www.exploit-db.com/exploits/4341
https://exchange.xforce.ibmcloud.com/vulnerabilities/36357
https://cve.imfht.com/detail/CVE-2007-4640
https://cve.yack.one/vendors/pakupaku
https://vulmon.com/searchpage?q=Pakupaku%20Pakupaku%20Cms&scoretype=cvssv2
https://www.cve.org/CVERecord?id=CVE-2007-4640