Description
ScriptsFeed Realtor Classifieds System (又称作 Real Estate Classifieds)的任意文件上传漏洞。远程认证用户通过会上传一个具有例如logo那样的可执行扩展名的一个文件并向classifieds1/yellow_images/的文件提交一个直接请求来访问该文件，以执行任意代码。
ScriptsFeed Realtor Classifieds System 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2008-6942
https://cxsecurity.com/cvepokaz/CVE-2008-6942
https://www.threatquarters.com/cves/CVE-2008-6942
https://www.exploit-db.com/exploits/7111
https://www.securitylab.ru/vulnerability/363175.php
https://cve.komodosec.com/cve-list?cvss_score_range=&search=quest&page_number=1945&sort_by=cwe_id&order=ascending&sort=cvss_score2