Description
来客PHP在线客服系统基于thinkphp5.0.24开发，在/admin/event/uploadimg存在任意文件上传漏洞
来客PHP在线客服系统任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/AboSteam/POPC/blob/main/Laykefu%E5%AE%A2%E6%9C%8D%E7%B3%BB%E7%BB%9F%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
http://www.yxfzedu.com/article/5714
https://blog.csdn.net/2301_80127209/article/details/136071659
https://cn-sec.com/archives/2425288.html
https://cloud.tencent.com/developer/article/2543660
https://www.cnblogs.com/backlion/p/15735339.html