GobyVuls/Telecom_system_manager_teletext_material_upload.php_fileupload_vulnerability.md

Telecom system /manager/teletext/material/upload.php fileupload vulnerability

Vulnerability	Telecom system /manager/teletext/material/upload.php fileupload vulnerability
Chinese name	电信网关配置管理系统后台 /manager/teletext/material/upload.php 文件上传漏洞
CVSS core	9.8
FOFA Query (click to view the results directly)	body="img/login_bg3.png" && body="系统登录"
Number of assets affected	856
Description	China Telecom Group Co., Ltd. (English name "China Telecom", referred to as "China Telecom") was established in September 2000. It is a large state-owned telecommunications company in China and a global partner of the Shanghai World Expo. There is a file upload vulnerability in the background of the telecom gateway configuration management system. An attacker can exploit this vulnerability to obtain a device shell.
Impact	China Telecom Group Co., Ltd. (English name "China Telecom", referred to as "China Telecom") was established in September 2000. It is a large state-owned telecommunications company in China and a global partner of the Shanghai World Expo. There is a file upload vulnerability in the background of the telecom gateway configuration management system. An attacker can exploit this vulnerability to obtain a device shell.