CNVD-2016-07286
Vulnerability from cnvd - Published: 2016-03-15
VLAI Severity ?
Title
Hsort报刊管理系统存在任意文件上传漏洞
Description
Hsort报刊管理系统是一套用于报刊、杂志数字版发布、更新的软件，只需将包含文章内容的纯文本进行简单标识，就可由本软件根据模板快速生成整个网站的内容。
Hsort报刊管理系统存在任意文件上传漏洞。由于Hsort报刊管理系统后台某处在进行文件上传时，未对用户身份进行验证，造成了任意文件上传。通过构造post请求，再使用burpsuite提交，即可成功上传webshell到网站根目录，获得服务器权限。
Severity
高
Formal description
厂商尚未提供漏洞修补方案，请关注厂商主页及时更新： http://www.hsort.com/
Reference
http://www.wooyun.org/bugs/wooyun-2015-0140968
Impacted products
| Name | 北京水天科技有限公司 Hsort报刊管理系统 |
|---|
{
"description": "Hsort\u62a5\u520a\u7ba1\u7406\u7cfb\u7edf\u662f\u4e00\u5957\u7528\u4e8e\u62a5\u520a\u3001\u6742\u5fd7\u6570\u5b57\u7248\u53d1\u5e03\u3001\u66f4\u65b0\u7684\u8f6f\u4ef6\uff0c\u53ea\u9700\u5c06\u5305\u542b\u6587\u7ae0\u5185\u5bb9\u7684\u7eaf\u6587\u672c\u8fdb\u884c\u7b80\u5355\u6807\u8bc6\uff0c\u5c31\u53ef\u7531\u672c\u8f6f\u4ef6\u6839\u636e\u6a21\u677f\u5feb\u901f\u751f\u6210\u6574\u4e2a\u7f51\u7ad9\u7684\u5185\u5bb9\u3002\r\n\r\nHsort\u62a5\u520a\u7ba1\u7406\u7cfb\u7edf\u5b58\u5728\u4efb\u610f\u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e\u3002\u7531\u4e8eHsort\u62a5\u520a\u7ba1\u7406\u7cfb\u7edf\u540e\u53f0\u67d0\u5904\u5728\u8fdb\u884c\u6587\u4ef6\u4e0a\u4f20\u65f6\uff0c\u672a\u5bf9\u7528\u6237\u8eab\u4efd\u8fdb\u884c\u9a8c\u8bc1\uff0c\u9020\u6210\u4e86\u4efb\u610f\u6587\u4ef6\u4e0a\u4f20\u3002\u901a\u8fc7\u6784\u9020post\u8bf7\u6c42\uff0c\u518d\u4f7f\u7528burpsuite\u63d0\u4ea4\uff0c\u5373\u53ef\u6210\u529f\u4e0a\u4f20webshell\u5230\u7f51\u7ad9\u6839\u76ee\u5f55\uff0c\u83b7\u5f97\u670d\u52a1\u5668\u6743\u9650\u3002",
"discovererName": "unknown",
"formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u8865\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u53ca\u65f6\u66f4\u65b0\uff1a \r\nhttp://www.hsort.com/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2016-07286",
"openTime": "2016-03-15",
"products": {
"product": "\u5317\u4eac\u6c34\u5929\u79d1\u6280\u6709\u9650\u516c\u53f8 Hsort\u62a5\u520a\u7ba1\u7406\u7cfb\u7edf"
},
"referenceLink": "http://www.wooyun.org/bugs/wooyun-2015-0140968",
"serverity": "\u9ad8",
"submitTime": "2015-09-15",
"title": "Hsort\u62a5\u520a\u7ba1\u7406\u7cfb\u7edf\u5b58\u5728\u4efb\u610f\u6587\u4ef6\u4e0a\u4f20\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…