GobyVuls/JeeSpringCloud_uploadFile.jsp_file_upload_vulnerability.md at a3d8b98922174799dbf254667344a5e8f64af974 - GobyVuls - 临风笛

admin/GobyVuls

0 Fork 0

mirror of https://github.com/gobysec/GobyVuls.git synced 2026-10-24 17:04:30 +00:00

Files

T

Goby 682bc57bee Create JeeSpringCloud_uploadFile.jsp_file_upload_vulnerability.md

2023-10-12 17:16:21 +08:00

1.1 KiB

Raw Blame History

JeeSpringCloud uploadFile.jsp file upload vulnerability

Vulnerability	JeeSpringCloud uploadFile.jsp file upload vulnerability
Chinese name	JeeSpringCloud uploadFile.jsp 文件上传漏洞
CVSS core	9.8
FOFA Query (click to view the results directly)	app="JeeSpringCloud"
Number of assets affected	282
Description	JeeSpringCloud is a free and open source Java Internet cloud rapid development platform.JeeSpringCloud can upload any file by accessing /static/uploadify/uploadFile.jsp and specify the file upload path through the ?uploadPath parameter, causing the server to be controlled.
Impact	An attacker can use this vulnerability to write a backdoor on the server side, execute code, obtain server permissions, and then control the entire web server.