Description
openBI是openBI公司的一个大数据可视化解决方案。 openBI 1.0.8 版本存在代码问题漏洞，该漏洞源于 /application/index/controller/Icon.php 文件的 uploadIcon 方法存在不受限制的文件上传问题。
openBI ploadIcon 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.sxxdckj.com/cms/a/openBI-Icon-php-wen-jian-cun-zai-ren-yi-wen-jian-shang-chuan-lou-dong.html
https://security.zone.ci/aliyun/ali_nvd/360999.html
https://avd.aliyun.com/detail?id=AVD-2024-1035
https://vuldb.com/?id.252310
https://cve.imfht.com/detail/CVE-2024-1035
https://www.sentinelone.com/vulnerability-database/cve-2024-1035/