Title:AfterLogic Aurora 路径遍历漏洞 (CVE-2021-26293) Description:Afterlogic Aurora是美国Afterlogic公司的一套使用PHP语言编写的企业邮件服务器平台。该平台包括电子邮箱、文件存储和地址簿管理等功能。 AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3 存在路径遍历漏洞,该漏洞允许通过目录遍历创建新文件。
1. It is advised to access via the original source first.2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.