TRS WCM 文件路径处理不当导致任意文件上传

Basic Fields

SSV ID:
SSV-91339
Find Time:
Unknown
Submit Time:
2016-04-18
Level:
Category:
文件上传
Component:
TRS WCM
Author:
Unknown
Submitter:
reddit
CVE-ID:
Add
CNNVD-ID:
Add
CNVD-ID:
Add
ZoomEye Dork:
Add

Source

Login to see

Detail

Contributor PyxYu Got  3.9KB
Login to see
小福仔 FireKy1in wechat None etc 13  exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor reddit totally have   10KB
Login to see
66 wechat_503 sampro have 5 Exchange

Reference Linking

Login to see

Solutions

Login to see
Popularity 6780
Need to bind phone before comment. Bind Now

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes