P2p security-meiya futures has arbitrary files uploaded by Getshell

P2p security-meiya futures has arbitrary files uploaded by Getshell

123

Detailed description:

P2p security-meiya futures Upload Vulnerability

Http: // **. **: 81

Files with vulnerabilities:

/Page/maint/common/UserResourceUpload. jsp

You can easily getshell by constructing the following form:

Code Region

You can directly upload html, txt, and other files. to upload jsp files, you need a very simple bypass. The Windows server can generate jsp files on the server by adding a file name after the file name.

Proof of vulnerability:

One sentence of success

Http: // **. **: 81/1. jsp 123

Solution:

111.