ARMBot upload.php 文件上传未限制漏洞

攻击者可以利用此漏洞上传恶意文件，例如 PHP 脚本，并将其写入 ARMBot 的 Web 根目录。通过这种方式，攻击者可以执行任意代码，从而完全控制受影响的系统。攻击者可以窃取敏感数据、安装恶意软件或利用受感染的系统发起进一步的攻击。由于该漏洞无需身份验证，攻击者可以匿名利用它，从而扩大了攻击范围。

Organizations using ARMBot in production environments, particularly those with publicly accessible upload functionalities, are at significant risk. Shared hosting environments where multiple users share the same server are especially vulnerable, as a compromise of one user's account could potentially lead to the compromise of the entire server.

• php: Examine web server access logs for POST requests to upload.php with suspicious file names containing path traversal sequences (e.g., ../public_html/).

grep 'upload.php.*../public_html/' /var/log/apache2/access.log

• php: Check the /public_html/ directory for newly created PHP files with unusual names or timestamps.

find /public_html/ -name '*.php' -type f -mtime -1

• generic web: Monitor file integrity for core ARMBot files, particularly those related to file handling and upload functionality. Unexpected modifications could indicate compromise. • generic web: Review web server error logs for any errors related to file uploads or path traversal attempts.

1. 2026-03-11Disclosure

   disclosure

1. 已保留2026-02-23
2. 发布日期2026-03-11
3. 修改日期2026-04-07
4. EPSS 更新日期2026-03-23

由于没有提供 fixed_in 版本，建议采取以下缓解措施。首先，限制上传文件类型，只允许安全的文件类型。其次，实施严格的文件名验证，防止攻击者使用路径遍历序列。使用 Web 应用防火墙 (WAF) 或代理服务器来过滤恶意文件上传请求。最后，定期审查上传目录的权限，确保只有授权用户才能访问。