微擎 /dock.ctrl.php 路径存在任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://fuping.site/2020/04/18/WeiQing-CMS-Background-Admin-GetShell/
• https://ybdt.me/2024/04/22/%E5%BE%AE%E6%93%8E%E5%AE%A1%E8%AE%A1/
• https://github.com/zan8in/wy876-POC
• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E5%BE%AE%E6%93%8E/%E5%BE%AE%E6%93%8E%200.8%20%E5%90%8E%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4/
• https://mochazz.github.io/2019/11/11/%E5%BE%AE%E6%93%8E%E6%BC%8F%E6%B4%9E/

Related Vulnerabilities

• 微擎 /payment/unionpay/notify.php SQL注入漏洞
• 微擎 AccountEdit.aspx 任意文件上传漏洞
• 微擎存在任意文件上传漏洞
• 微擎存在鉴权绕过漏洞
• 微擎管理系统存在弱口令漏洞
• 微擎系统 AccountEdit 文件 文件上传漏洞
• 微擎 /AccountEdit.aspx 路径存在任意文件上传漏洞