Description
美特CRM /common/jsp/upload3.jsp 接口存在任意文件上传漏洞，未经身份攻击者可通过该漏洞在服务器端任意执行代码，写入后门，获取服务器权限，进而控制整个 web 服务器。
美特CRM /common/jsp/upload3.jsp 文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cn-sec.com/archives/4089270.html
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/MetaCRM/MetaCRM%E5%AE%A2%E6%88%B7%E5%85%B3%E7%B3%BB%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://www.ddpoc.com/DVB-2024-7039.html
https://leeyuxun.github.io/MetaCRM6%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.html
https://mrxn.net/jswz/metasoft-mobileupload-fileupload-rce.html
https://avd.aliyun.com/detail?id=AVD-2021-699364