xpshop网店系统任意文件上传漏洞

- AV AC AU C I A
发布: 2025-04-13
修订: 2025-04-13

### 简要描述: ### 详细说明: ``` 官方:http://www.xpshop.cn ``` [<img src="https://images.seebug.org/upload/201504/15211722ef4d22b553cb432e262d48118cf7493e.jpg" alt="1.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201504/15211722ef4d22b553cb432e262d48118cf7493e.jpg) ``` 官方demo站:http://enframe.xpshop.cn/ ``` [<img src="https://images.seebug.org/upload/201504/15211756979e58177be728ea299bf4612d7ba63b.jpg" alt="2.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201504/15211756979e58177be728ea299bf4612d7ba63b.jpg) 用户中心,添加场景。直接上传任意格式文件,上传一句话 [<img src="https://images.seebug.org/upload/201504/152118220752c9d5f922491803116af20cbd722a.jpg" alt="3.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201504/152118220752c9d5f922491803116af20cbd722a.jpg) [<img src="https://images.seebug.org/upload/201504/15211854ac1e3c82eab1f63fdf7db41bf5db73e1.jpg" alt="4.jpg" width="600"...

0%
暂无可用Exp或PoC
当前有0条受影响产品信息