CVE-2020-29597 PoC — IncomCMS 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29597.yaml

Associated Vulnerability

Title:IncomCMS 安全漏洞 (CVE-2020-29597)
Description:Incomcms是Incomcms个人开发者的一个建站系统。 IncomCMS 2.0版本存在安全漏洞，该漏洞源于modules/uploader/showcase/script.php 不安全文件上传漏洞。此漏洞允许未经身份验证的攻击者可利用该漏洞将文件上传到服务器。

Description

IncomCMS 2.0 has a an insecure file upload vulnerability in modules/uploader/showcase/script.php. This allows unauthenticated attackers to upload files into the server.

File Snapshot


 id: CVE-2020-29597

info:
  name: IncomCMS 2.0 - Arbitrary File Upload
  author: princechaddha
  sev

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!