pigcms前台任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/cms/PigCMS-action_flashUpload-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://blog.csdn.net/hackzkaq/article/details/133746523
• https://avd.aliyun.com/detail?id=AVD-2023-43269
• https://cn-sec.com/archives/2066300.html
• https://nvd.nist.gov/vuln/detail/CVE-2023-43269
• https://github.com/thatformat/Hvv2023/blob/main/PigCMS%20action_flashUpload%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.txt
• https://www.saury.net/2775.html
• https://github.com/xhs-d/PigCMS
• https://cve.imfht.com/detail/CVE-2023-43269?lang=en
• https://zhuanlan.zhihu.com/p/650270767

Related Vulnerabilities

• PoCpigcms-file-upload: PigCMS File Upload
• PigCMS /index.php SQL 注入漏洞
• PigCMS ShowDetail SQL注入漏洞
• PigCMS action_export 备份文件下载漏洞