Description
cuteflow工作流系统任意文件上传，导致黑客可以上传恶意文件到服务器，获取服务器权限。
cuteflow /restart_circulation_values_write.php 路径存在任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2012-10050
https://www.exploit-db.com/exploits/20111
https://www.cvedetails.com/cve/CVE-2012-10050/
https://github.com/advisories/GHSA-h3xh-crwg-5j8r
https://www.ruijie.com.cn/cp/xw-cp-aq-ipswxbk/33226
https://cve.imfht.com/intel/436965?lang=en
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=26375