Description
MyBiz MyProcureNet是马来西亚MyBiz Solutions公司的一套采购流程自动化解决方案。
MyBiz MyProcureNet任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://sec-consult.com/vulnerability-lab/advisory/arbitrary-file-upload-cross-site-scripting-in-mybiz-myprocurenet/
https://seclists.org/fulldisclosure/2018/May/32
https://nvd.nist.gov/vuln/detail/CVE-2018-11091
https://www.cve.org/CVERecord?id=CVE-2018-11091
https://avd.aliyun.com/high-risk/list?page=46
https://github.com/advisories/GHSA-ph56-52p3-8fjx
https://www.cvedetails.com/cve/CVE-2018-11091/
https://avd.aquasec.com/nvd/2018/cve-2018-11091/
https://cve.imfht.com/detail/CVE-2018-11091