Description
Likeshop 商城系统存在任意文件上传漏洞，此漏洞是formImage对请求中的参数数据验证不足导致的。
Likeshop 商城系统 formImage 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://stack.chaitin.com/techblog/detail/278
https://github.com/zan8in/wy876-POC/blob/main/Likeshop/Likeshop-formimage%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
https://www.lmboke.com/archives/likeshopren-yi-wen-jian-shang-chuan-lou-dong-cve-2024-0352
https://blog.csdn.net/maxiluo/article/details/135865768
https://cn-sec.com/archives/2399145.html
https://zhuanlan.zhihu.com/p/598780174
https://www.sentinelone.com/vulnerability-database/cve-2024-0352/