九麒科技 大蚂蚁通讯系统 PublicController 需授权 访问控制不当漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://mrxn.net/jswz/bigant-Public-download.html
• https://mrxn.net/tag/%E6%BC%8F%E6%B4%9E/page/3
• https://github.com/Mr-xn/Penetration_Testing_POC/blob/master/README.md
• https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11_v2
• https://zhuanlan.zhihu.com/p/1932214870562047555

Related Vulnerabilities

• 大蚂蚁 (BigAnt) 即时通讯系统 PublicController 任意文件读取漏洞
• 九麒科技 大蚂蚁通讯系统 plus_get_favicon 文件上传限制不当漏洞