漏洞描述
Online Book Store系统参数过滤不严，导致命令执行。
Online Book Store任意文件上传导致RCE
PoC代码
暂无相关漏洞推荐
- 天锐绿盾审批系统 findOnlineUserForPage.do 信息泄露漏洞
- POC CVE-2016-15041: MainWP Dashboard <= 3.1.2 - Stored Cross-Site Scripting
- POC CVE-2012-10018: WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File Upload
- POC CVE-2021-24657: Limit Login Attempts WordPress - Stored Cross-site Scripting
- POC CVE-2021-24681: Duplicate Page WordPress - Stored Cross-Site Scripting
- POC CVE-2022-1029: Limit Login Attempts - Stored Cross-Site Scripting
- POC CVE-2023-27624: WordPress Redirect After Login <= 0.1.9 - Admin Stored XSS
- POC CVE-2024-6753: Social Auto Poster <= 5.3.14 - Stored Cross-Site Scripting
- POC wordpress-storefront-fpd: WordPress Storefront Theme - Full Path Disclosure
- POC jetpack-stored-xss: Jetpack < 6.5 - Stored Cross-Site Scripting
- Online MCQ EXAM SQL注入漏洞
- itsourcecode Online Frozen Foods Ordering System SQL注入漏洞
- 金和OA BookGetStoreType.aspx SQL注入漏洞