友点CMS image_upload.php 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cn-sec.com/archives/2945139.html
• https://blog.csdn.net/qq_36334672/article/details/137110982
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%8F%8B%E7%82%B9%E5%BB%BA%E7%AB%99%E7%B3%BB%E7%BB%9F/%E5%8F%8B%E7%82%B9%E5%BB%BA%E7%AB%99%E7%B3%BB%E7%BB%9Fimage_upload.php%E5%AD%98%E5%9C%A8%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://cn-sec.com/archives/2507688.html
• https://cn-sec.com/archives/2529376.html
• https://www.ctfiot.com/163716.html
• https://wiki.shikangsi.com/post/share/30c24c77-42e6-4a0c-b60b-e02d09dc325b
• https://cve.imfht.com/detail/CVE-2024-7329
• https://blog.csdn.net/weixin_28716181/article/details/159951253
• https://cn-sec.com/archives/tag/%E5%8F%8B%E7%82%B9cms%E6%BC%8F%E6%B4%9E

Related Vulnerabilities

• 友点CMS /Public/ckeditor/plugins/multiimage/dialogs/image_upload.php 文件上传漏洞
• 友点cms /index.php/base 登录绕过
• 狮子鱼CMS image_upload.php 任意文件上传漏洞
• 狮子鱼系统CMS任意文件上传image_upload.php
• Jan_De_Graaff SimpleBoard 'image_upload.php'任意文件上传漏洞
• BLOG 'image_upload.php' 任意文件上传漏洞