Description
/web/addons/upload.php
western digital mycloud upload任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://mrxn.net/jswz/west-nas-addons-upload-rce.html
https://www.gm7.org/archives/48360
https://www.tenablecloud.cn/plugins/nessus/105732
https://cn-sec.com/archives/4395990.html
https://cloud.tencent.com/developer/article/1043712
https://nosec.org/m/share/2664.html
https://www.anquanke.com/post/id/93963
https://pentest-tools.com/vulnerabilities-exploits/western-digital-my-cloud-file-upload-vulnerability_7211
https://www.gzzknt.cn/views/safe/Security_Bulletin/CNTA-2018-0003.shtml
https://sec-consult.com/vulnerability-lab/advisory/unauthenticated-os-command-injection-arbitrary-file-upload-in-western-digital-my-cloud/
https://www.exploit-db.com/exploits/43435
https://www.tenable.com/plugins/nessus/105732
https://nvd.nist.gov/vuln/detail/CVE-2017-17560