Midea's bidding and purchasing platform uploads a lot of contract information related to Getshell

Midea's bidding and purchasing platform uploads a lot of contract information related to Getshell

Rt. No one else has been there yet. You can give it a little more late at night.

Http://pur.mideadc.com/ProviderRegister.aspx registration upload, will be on the file checking, but the Checking Method written in the Request Packet
 

Upload ID card.

Add. Retrial

At the same time, the traversal vulnerability found the directory, and the file was written into it.
 

 

 

There is a problem with the pony.

Intranet email account password

Vulnerability Traversal
 

http://pur.mideadc.com/Upload/files/

 

http://pur.mideadc.com/upfile/files/

 

 

 

This is the directory where the ID card is stored.
 

 

Solution:

Modify.