Description
BigAnt的 upload_file 接口存在文件上传漏洞，攻击者可以通过上传特制的 PHP文件，执行恶意代码，实现服务器的远程控制，可能导致敏感信息泄露、数据篡改等危害。
大蚂蚁 (BigAnt) 即时通讯系统 upload_file 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://mrxn.net/jswz/bigant-upload_file-rce.html
https://cn-sec.com/archives/5018132.html
https://www.gsdzj.gov.cn/info/1033/12199.htm
https://avd.aliyun.com/detail?id=AVD-2012-6274
https://www.exploit-db.com/exploits/24528
https://vulncheck.com/blog/bigant-cve-2025-0364
https://www.cvedetails.com/cve/CVE-2012-6274/