Tplay-cms 存在前台upload任意文件上传

2025-03-11 Tplay PoC No

Description

Tplay是一款基于ThinkPHP5.0.13 + layui2.2.45 + Mysql开发的后台管理框架,tplaycms前台由于存在鉴权方面存在疏漏，导致了可未授权访问，从而通过/admin/common/upload接口进行任意文件上传

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

Related Vulnerabilities