PHP Code Injection
Main code
1<div id= "Main" >2 34 5<p>this is just a test page, reflecting back your <a href= "<?php Echo ($_server["Script_name"]);? >?message=test ">message</a>...</p>6 7<?PHP8 9 if(isset($_request["Message"])//Accept the message parameter hereTen { One A //If The security level isn't MEDIUM or high - if($_cookie["Security_level"]! = "1" &&$_cookie["Security_level"]! = "2")//If the low level executes the following code - { the -?> -<p><i><?php @Eval("echo".)$_request["Message"]. ";");? ></i></p>//Direct echo message - +<?PHP - + } A at //If The security level was MEDIUM or high - else//If not low level, perform echo function filtering - { -?> -<p><i><?phpEcho Htmlspecialchars($_request["Message"], ent_quotes, "UTF-8");;? ></i></p> - in<?PHP - to } + - } the *?> $</div>
My level is lower, think of is phpinfo (), then directly on the knife, watching the foreigner on YouTube, direct command to perform a rebound of a NC
Bwapp----PHP Code Injection