Description
FleetCommander是一款基于WEB的应用。 Agile FleetCommander和FleetCommander Kiosk 4.08之前版本中存在多个不限制文件上传漏洞。远程攻击者可利用该漏洞通过未明页面执行任意代码。
Agile FleetCommander/FleetCommander Kiosk 多个任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2012-4944
https://cve.imfht.com/detail/CVE-2012-4944
https://www.kb.cert.org/vuls/id/427547
https://cxsecurity.com/cveproduct/21130/fleetcommander/
https://cve.org/CVERecord?id=CVE-2012-4944
https://www.threatquarters.com/cves/CVE-2012-4944
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2012-4944