Description
用友NC avatar 任意文件上传漏洞，攻击者可利用此漏洞获取服务器权限
用友NC /upload/avatar 路径存在任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BNC-avatar%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/qq_36618918/article/details/137913219
https://cn-sec.com/archives/2541237.html
https://starmap.dbappsecurity.com.cn/info/6974
https://cangqingzhe.github.io/2021/10/23/%E7%94%A8%E5%8F%8BNC6-5%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/