Description
DataCube3终端测量系统是一款用于终端测量和数据管理的系统。其 /admin/transceiver_schedule.php 接口存在文件上传漏洞，攻击者可以利用该漏洞上传恶意文件，从而在系统中执行任意代码，导致系统被入侵或数据泄露。
DataCube3终端测量系统 /admin/transceiver_schedule.php 文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-34854
https://github.com/Yang-Nankai/Vulnerabilities/blob/main/DataCube3%20Shell%20Code%20Injection.md
https://www.exploit-db.com/exploits/51868
https://www.cybersecurity-help.cz/vdb/SB2024060415
https://osv.dev/vulnerability/CVE-2024-34854
https://feedly.com/cve/CVE-2024-34854
https://attackerkb.com/topics/2OaeB5h9MR/cve-2024-34854