kkFileView zipslip 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://stack.chaitin.com/vuldb/detail/513b41ba-f9ac-4506-a4c4-c6ffb2b10433

Related Vulnerabilities

• kkFileView /getCorsFile 服务器端请求伪造漏洞
• PoCCVE-2021-43734: kkFileview v4.0.0 - Local File Inclusion
• PoCCVE-2022-29349: kkFileView 4.0.0 - Cross-Site Scripting
• PoCCVE-2022-35151: kkFileView 4.1.0 - Cross-Site Scripting
• PoCCVE-2022-40879: kkFileView 4.1.0 - Cross-Site Scripting
• PoCCVE-2022-43140: kkFileView 4.1.0 - Server-Side Request Forgery
• PoCCVE-2022-46934: kkFileView 4.1.0 - Cross-Site Scripting
• PoCCVE-2021-43734: kkFileView getCorsFile 任意文件读取漏洞
• PoCkkfileview-upload-xss: kkFileView Upload - XSS
• PoCCVE-2022-42149: kkFileView 4.0 - Server-Side Request Forgery
• PoCkkfileview-panel: kkFileView Panel - Detect
• 铭飞-MCMS /file/upload.do zipslip 文件上传漏洞