Getshell arbitrary upload of a System File of Huawei

Getshell arbitrary upload of a System File of Huawei

Send a vulnerability to check your presence! :)

# Title

# The problem lies here:

Http://career-oj.huawei.com/exam/camLogin.jsp

# Registering an account to log on
 

# Upload a modified package
 

The saved image is saved in the http://career-oj.huawei.com/exam/avatar/ directory


Uploaded to http://career-oj.huawei.com/exam/avatar/temp/ directory before


File Name: User Logon email

 

 

# System Permissions


The shell address is


Http://career-oj.w.wei.com/exam/avatar/temp/?email protected] tom


You need to log on to the account to access the shell. Otherwise, the system will force a 302 redirect.


The test account is [email protected] asdasd1
 

Solution:

# Repair


Come on, 20rank! :)