Description
因酷教育软件开源网校程序 inxedu v2.0.6组件uploadfile存在任意文件上传漏洞，攻击者可以利用该漏洞在服务器上执行恶意代码控制整个服务器。
因酷教育软件开源网校程序uploadfile任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/0day404/HV-2024-POC/blob/main/%E5%9B%A0%E9%85%B7%E6%95%99%E8%82%B2%E8%BD%AF%E4%BB%B6%E5%BC%80%E6%BA%90%E7%BD%91%E6%A0%A1%E7%A8%8B%E5%BA%8Fgok4%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://www.ddpoc.com/DVB-2024-7723.html
https://shu1l.github.io/2021/02/16/ssm-kuang-jia-shen-ji-xue-xi-yin-ku-wang-xiao-zai-xian-jiao-yu-xi-tong-shen-ji/
https://cn-sec.com/archives/3016120.html
https://gitee.com/hxyue/POC1