74cms /index.php?m=Home&c=Members&a=register 任意文件读取漏洞

2024-01-04 74cms PoC No

Description

在74cms v4.2.26的/index.php?m=Home&c=Members&a=register处的cookie中的members_bind_info[temp_avatar]=处填写想读取的文件，例如：“../../../../Application/Common/Conf/db.php;”即可触发漏洞

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

https://github.com/ianxtianxt/74cms-upload
https://github.com/apachecn/sec-learning/blob/master/docs/006.md
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/74cms/74cms%20v4.2.126-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E/
https://github.com/Apibug/SecPost/blob/main/74cms%20v4.2.126-%E5%9B%A0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%E5%AF%BC%E8%87%B4%E7%9A%84%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E5%AF%86%E7%A0%81%E4%BF%AE%E6%94%B9%E6%BC%8F%E6%B4%9E.md
https://laolisafe.com/3104.html
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/74cms/74cms%20v4.2.3%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96/
https://www.cnblogs.com/0dot7/p/17228527.html
https://qkl.seebug.org/vuldb/ssvid-94147

Description

PoC

References

Related Vulnerabilities