上海建业信息科技 章管家 uploadFileByChunks.htm 需授权 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/zan8in/wy876-POC/blob/main/%E7%AB%A1%E7%AE%A1%E5%AE%B6-%E5%8D%B0%E7%AB%A0%E6%99%BA%E6%85%A7%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0/%E7%AB%A1%E7%AE%A1%E5%AE%B6%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(XVE-2024-19042).md
• https://blog.csdn.net/LiangYueSec/article/details/140996266
• https://cn-sec.com/archives/3624538.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%AB%A1%E7%AE%A1%E5%AE%B6-%E5%8D%B0%E7%AB%A0%E6%99%BA%E6%85%A7%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0/%E7%AB%A1%E7%AE%A1%E5%AE%B6%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E(XVE-2024-19042).md
• https://www.secevery.com/toBugInfo?id=1818898922916192257
• https://k0u1g.cn/VulnLib/%E6%BC%8F%E6%B4%9E%E5%BA%932024.html

Related Vulnerabilities

• 章管家 /api/personSeal/UserCreateService 权限绕过漏洞
• 章管家 /api/personSeal_jdy/saveUser.htm 未授权访问漏洞
• 章管家 /listUploadIntelligent.htm SQL 注入漏洞
• PoC上海建业信息科技 章管家 listUploadIntelligent 未授权 SQL注入漏洞
• 上海建业信息科技 章管家 updatePwd.htm 身份验证错误漏洞
• 章管家印章智慧管理平台 list.htm SQL注入漏洞
• 章管家 listUploadIntelligent SQL注入漏洞
• 章管家 updatePwd 任意账号密码重置漏洞
• PoC章管家listUploadIntelligent接口存在sql注入漏洞
• 章管家印章智慧管理平台 listUploadIntelligent SQL注入漏洞