金山终端安全系统V9 /inter/software_relation.php 任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/zan8in/pocwiki/blob/main/%E9%87%91%E5%B1%B1%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8%E7%B3%BB%E7%BB%9FV9%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://cn.t00ls.com/Vuls-T00ls-2021-00279.html
• https://0x20h.com/p/6fcd.html
• https://github.com/tzwlhack/Vulnerability/blob/main/%E9%87%91%E5%B1%B1%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8%E7%B3%BB%E7%BB%9F%20V8-V9%E5%AD%98%E5%9C%A8%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://github.com/YinWC/2021hvv_vul/blob/master/0419/%E9%87%91%E5%B1%B1%20V8%20-V9%20%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8%E7%B3%BB%E7%BB%9F%E6%BC%8F%E6%B4%9E%E5%90%88%E9%9B%86.md
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/%E9%87%91%E5%B1%B1-V8-V9-%E7%BB%88%E7%AB%AF%E5%AE%89%E5%85%A8%E7%B3%BB%E7%BB%9F-%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
• https://t.me/s/Cybersec_threat/44

Related Vulnerabilities

• 金山终端安全系统V9 ajax.php存在sql注入漏洞
• 金山终端安全系统 update_software_info_v2.php 文件 SQL 注入漏洞
• 金山终端安全系统 /inter/ajax.php 远程代码执行漏洞
• 金山终端安全系统任意文件上传漏洞
• 金山终端安全系统V9sql注入漏洞
• 金山终端安全系统upload.php任意文件上传漏洞
• 金山终端安全系统V8 pdf_maker.php 命令执行漏洞
• 金山终端安全系统任意文件读取漏洞