file upload vulnerability in pagekit 1.0.18

[Townmacro]

Problem

A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files

Technical Details

• Pagekit version:1.0.18
• Webserver:Nginx2.4.18
• Database:Mysql5.7.26
• PHP Version:7.3.4
• OS:Windows10

A file upload vulnerability exists in the storage feature of pagekit v1.0.18, which allows an attacker to upload malicious files

1. do not set allow php files to be uploaded

2. then select the upload point to upload the malicious php file and modify the packet via Burp Suite to change the file name

   

3. Upload the file successfully

   

4. The file can then be accessed at /storage/shell.php