CVE-2024-44849 PoC — Qualitor 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44849.yaml

Associated Vulnerability

Title:Qualitor 安全漏洞 (CVE-2024-44849)
Description:Qualitor是Qualitor公司的一个管理服务流程和集中服务平台。 Qualitor 8.24及之前版本存在安全漏洞，该漏洞源于容易受到远程代码执行(RCE)攻击，攻击者可以通过checkAcesso.php中的任意文件上传进行攻击。

Description

Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php.

File Snapshot


 id: CVE-2024-44849

info:
  name: Qualitor <= 8.24 - Remote Code Execution
  author: s4e-io
  severi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!