Web应用系统文件上传漏洞分析  

Analysis of File Upload Vulnerability in Web Application System

作　　者：康志辉 KANG Zhihui

机构地区：[1]福建厦门361024

出　　处：《信息与电脑》2023年第4期32-34,共3页Information & Computer

摘　　要：文件上传漏洞是常见的Web应用系统网络安全漏洞,攻击者往往通过上传恶意脚本对系统的服务器进行劫持和非法操作,危害较大。基于此,分析了Web应用系统文件上传漏洞的基本情况和漏洞的渗透测试思路,并针对漏洞的特点提出了修复措施。File upload vulnerability is a common web application system network security vulnerability.Attackers often hijack and illegally operate the system's servers by uploading malicious scripts,which causes great harm.Based on this,this paper analyzes the basic situation of the file upload vulnerability of the Web application system and the penetration test idea of the vulnerability,and puts forward the repair measures according to the characteristics of the vulnerability.

关 键 词：WEB系统 文件上传 漏洞 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]