| शीर्षक | UCMS 1.6 fileedit.php Bypass Limit Arbitrary File Upload Vulnerability |
|---|
| विवरण | Vulnerability description:
The vulnerability lies in /ucms/sadmin/fileedit.php file, The file suffix verification can be bypassed by modifying the POST packet, so as to achieve arbitrary file upload.
Log in to the system file management module.
First upload a txt type file, then edit and change the content to a php Trojan.Save the modified file, then grab the data request package,In the process, change file=result.txt to file=333.php.
Then access the uploaded file 333.php. Get webshell. |
|---|
| स्रोत | ⚠️ https://github.com/yztale/taley/blob/main/README.md |
|---|
| उपयोगकर्ता | tale (UID 40171) |
|---|
| सबमिशन | 09/03/2023 07:26 AM (4 साल पहले) |
|---|
| संयम | 09/03/2023 10:48 PM (15 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 222683 [UCMS 1.6 System File Management sadmin/fileedit.php file अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|