漏洞详情

披露状态:

2014-11-06: 细节已通知厂商并且等待厂商处理中
2014-11-11: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

优购
貌似给你们提的漏洞都是忽略?why?
做人做事都一样,首先要态度端正吧,得厚道,你说呢?

详细说明:

http://scm.17ugo.com/ 厂商管理系统
注册账号 上传

0.png


修改后缀

1.png


ok

2.png


3.png


4.png


5.png


UPLOAD_UNIT_IMAGE_ALIAS_DIR=picpath
SYS_ICE_IP=10.0.5.77
BICOOL_WEBSERVICE_IP=http://10.0.4.20/newproduct/webservice.php?wsdl
GHB_URL = http://192.168.255.142:8090/UgoSCMWebService/services/SCMWebService?wsdl
arp -a
localhost (10.0.128.1) at 00:00:5e:00:01:65 [ether] on eth0
localhost (10.0.128.111) at 00:50:56:84:00:63 [ether] on eth0
localhost (10.0.128.3) at 80:f6:2e:30:36:39 [ether] on eth0
localhost (10.0.128.112) at 00:50:56:84:00:70 [ether] on eth0
可以内网渗透~
不深入了 改改吧

漏洞证明:

如上~

修复方案:

过滤 服务端验证下

标签: none

评论已关闭