[1day] Reproduced the file upload vulnerability in the integrated management platform of Dahua Smart Park

Table of contents

1. Vulnerability description

Two, the impact version

3. Asset surveying and mapping

4. Vulnerability recurrence 

---

1. Vulnerability description

        Dahua Smart Park Integrated Management Platform is a smart park management platform that integrates intelligence, informatization, networking, and security. It aims to provide a one-stop solution for the park, including security, energy management, environmental monitoring, personnel Management, parking management and many other aspects. There is a file upload vulnerability in the /publishing/publishing/material/file/video interface of the Dahua Intelligent Park Integrated Management Platform. Remote unauthorized attackers can use this vulnerability to obtain sensitive information࿰