The umail system uploads files, causing getshell

The umail system uploads files, causing getshell

The umail system uploads files, causing getshell

Set the email, upload the image Trojan, and right-click to get the file path.

Http://mail.comingchina.com/webmail/client/cache/78655/letterpaper_1_thumb.jpg

Remove: _ thumb

Http://mail.comingchina.com/webmail/client/cache/78655/letterpaper_1.jpg

This is the original image address:

Finally, execute the PHP Trojan file using CGI

Http://mail.comingchina.com/webmail/client/cache/78655/letterpaper_1.jpg/.php

 

 

 

Solution:

CGI php Parsing Vulnerability