Description
福建科立讯通信指挥调度平台存在文件上传漏洞。此漏洞是由于/api/client/相关接口对用户上传的文件缺乏校验导致的。
福建科立讯通信指挥调度平台 api client 接口文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cloud.tencent.com/developer/article/2440967
https://www.mhtsec.com/328/
https://cn-sec.com/archives/2413742.html
https://mrxn.net/jswz/custom-zx-upload-rce.html
https://blog.csdn.net/qq_44905116/article/details/135675773
https://www.6cloudtech.com/portal/article/index/id/1391.html
https://gitea.com/Run0nceEx/POC