Skip to content

There is an unrestricted file upload vulnerability to GetShell #4

@ProxyErgo

Description

@ProxyErgo

There is a serious arbitrary file upload vulnerability In the file upload operation of weixinCmsSiteController.
image
image

With no checking of file type , an evil jsp script can be uploaded and the file url in the server will return in the response.Then it can be a webshell.
image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions