PerfreeBlog Arbitrary File Upload Vulnerability in Version 4.0.11

An arbitrary file upload vulnerability has been identified in the attach component of PerfreeBlog version 4.0.11. This vulnerability allows regular users to upload arbitrary files and execute code contained within those files.

Impact

Exploitation of this vulnerability allows for arbitrary file uploads, which can be used to execute malicious code on the server.

Reproduction

To reproduce this vulnerability, log in as a regular user and send a POST request to the '/api/auth/attach/uploadAttachByUrl' endpoint. Include a URL pointing to a file, such as a crafted SVG file containing JavaScript, in the request body. Once the file is uploaded, access it through the provided URL to trigger the code execution.