| タイトル | Home Clean Services Management System add_register.php File Upload Getshell |
|---|
| 説明 | At the file upload function, the application system checks the validity of the file type, format, and content uploaded by the user, so that attackers can upload Webshell (.php, .jsp, asp, etc.) malicious script files or files in unexpected formats, such as: HTML files, SHTML files, etc., at the same time, you can use characters such as directory jump or control the upload directory to directly upload files to the Web directory or any directory, which may lead to the execution of arbitrary malicious script files on the remote server, thereby directly obtaining application system permissions.Home Clean Services Management System does not filter the content correctly at the "register" module, resulting in the generation of File upload. |
|---|
| ソース | ⚠️ https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Home%20Clean%20Services%20Management%20System/HCS_add_register.php_File_Upload_Getshell.md |
|---|
| ユーザー | webray.com.cn (UID 24778) |
|---|
| 送信 | 2022年05月24日 04:44 (4 年 ago) |
|---|
| モデレーション | 2022年05月24日 06:23 (2 hours later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 200582 [Home Clean Services Management System 1.0 register.php?link=registerand 特権昇格] |
|---|
| ポイント | 20 |
|---|