References https://mrxn.net/jswz/Western-Digital-My-Cloud-NAS-multi_uploadify-rce.html https://www.gm7.org/archives/48360 https://www.ddpoc.com/DVB-2025-9307.html https://www.tenablecloud.cn/plugins/nessus/105732 https://community.wd.com/t/cve-2017-17560-western-digital-mycloud-multi-uploadify-file-upload-metasploit/220034 https://www.exploit-db.com/exploits/43356 https://www.rapid7.com/db/modules/exploit/linux/http/wd_mycloud_multiupload_upload/ https://sec-consult.com/vulnerability-lab/advisory/unauthenticated-os-command-injection-arbitrary-file-upload-in-western-digital-my-cloud/ https://www.tenable.com/plugins/nessus/105732 https://thehackernews.com/2018/01/western-digital-mycloud.html https://nvd.nist.gov/vuln/detail/CVE-2017-17560 https://cn-sec.com/archives/5061851.html
Related VulnerabilitiesPoCibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request ForgeryPoCCVE-2020-36884: BrightSign Digital Signage 8.2.26 - Server-Side Request ForgeryBrightSign Digital Signage /speedtest SSRF 漏洞PoCCVE-2026-5718: Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution用友 U8Cloud MultiRepChooseAction SQL 注入漏洞畅捷通T+ /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController.Ufida.T.SM.UIP.ashx SQL 注入漏洞PoCwpml-multilingual-cms-xss: WordPress WPML Multilingual CMS < 4.6.1 - Cross-Site ScriptingWordPress Drag and Drop Multiple File Upload for WooCommerce dnd_codedropz_upload_wc 文件上传漏洞(CVE-2025-4403)PoCCVE-2024-5057: WordPress Easy Digital Downloads <= 3.2.12 - SQL InjectionPoCCVE-2023-30869: Easy Digital Downloads - Privilege Escalation汉王e脸通综合管理平台 /manage/authMultiplePeople/getGroupEmployee.do SQL 注入漏洞