漏洞描述
PHPStore Auto Classifieds的任意文件上传漏洞。 远程认证用户通过上传一个具有例如logo那样的可执行扩展名的一个文件并向cars/cars_images/的文件提交一个直接请求来访问该文件，以执行任意代码。
phpstore auto_classifieds 任意文件上传漏洞
PoC代码
暂无相关漏洞推荐
- phpMyFAQ /api/setup/backup 信息泄露漏洞（CVE-2025-69200）
- PHP 安全漏洞
- POC CVE-2019-10647: ZZZCMS ZZZPHP 1.6.3 – Remote PHP Code Execution (RCE)
- POC CVE-2023-38875: PHP Login System 2.0.1 - Cross-Site Scripting
- POC functions-php-disclosure: functions.php Full Path Disclosure
- POC CVE-2025-44136: MapTiler Tileserver-php v2.0 - Unauthenticated XSS
- POC CVE-2025-44137: MapTiler Tileserver-php v2.0 - Unauthenticated File Read
- POC generic-php-files: Generic PHP Backup Information Disclosure
- PHPGurukul Employee Record Management System 代码注入漏洞
- PHPJABBERS Restaurant Menu Maker Project 代码注入漏洞
- php-livechat-uploadimg-html-upload: PHP LiveChat Upload
- thinkphp-30-rce: Thinkphp 3.0 RCE
- thinkphp-5.0.23-rce: Thinkphp debug 执行任意命令