A website of hesheng yuan can use getshell to threaten Intranet Security (disclosing some personnel information and discovering previous footprints)

A website of hesheng yuan can use getshell to threaten Intranet Security (disclosing some personnel information and discovering previous footprints)

A sub-station of hesheng yuan can shell into the Intranet

Http: // 58.62.201.210/

 

The integration of wamp into the php environment is inexplicable.
 

Check whether phpmyadmin contains root/123456
 

Develop the thinkphp framework and use absolute paths at will
 

 

 

The footprints of our predecessors and lcx
 

There are also Directory Traversal
 

 

Solution:

1. Change Middleware

2. phpmyadmin delete or change the password