mirror of
https://github.com/gobysec/GobyVuls.git
synced 2025-05-06 02:31:35 +00:00
10 lines
494 B
Markdown
10 lines
494 B
Markdown
# MCMS 5.2.4 Arbitrary File Upload
|
|
|
|
Mingfei MCms is a complete open source content management system.MCms 5.2.4 version /file/upload.do has arbitrary file upload vulnerabilities. Attackers can upload malicious Trojan horses to control server permissions.
|
|
|
|
FOFA **query rule**: [body="ms/1.0.0/ms.js" || body="铭飞MCMS"](https://fofa.so/result?qbase64=Ym9keT0ibXMvMS4wLjAvbXMuanMiIHx8IGJvZHk9IumTremjnk1DTVMi)
|
|
|
|
# Demo
|
|
|
|
|