PHPOA upload/index.php 路径存在任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.ddpoc.com/poc/DVB-2021-479.html
• https://qkl.seebug.org/vuldb/ssvid-91949
• https://www.modb.pro/db/144493
• https://qkl.seebug.org/vuldb/ssvid-91950
• https://idocdown.com/app/articles/blogs/detail/510

Related Vulnerabilities

• PoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution
• PoCCVE-2026-48611: phpBB < 3.3.17 - Authentication Bypass
• PoCCVE-2026-46364: phpMyFAQ <= 4.1.1 - SQL Injection
• PoCCVE-2026-6433: FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution
• phpVMS /importer 未授权访问漏洞（CVE-2026-42569）
• PoCphpjabbers-event-booking-xss: PHPJabbers Event Booking Calendar - Reflected XSS
• phpMyFAQ /api/captcha SQL 注入漏洞
• PoCCVE-2026-42569: phpVMS < 7.0.6 - Legacy Importer Authorization Bypass
• phpVMS存在权限绕过漏洞(CVE-2026-42569)
• PoCCVE-2020-26935: phpMyAdmin < 5.0.3 - SQL Injection
• PoCphp-prober-exposure: PHP Prober - Exposure
• PoCcakephp-debugkit-exposure: CakePHP - Debug Kit Toolbar Exposure
• PoCCVE-2025-69200: phpMyFAQ - Configuration Backup Disclosure