A sub-station in the competitive world commands getshell

A sub-station in the competitive world commands getshell

A sub-station in the competitive world commands getshell

In earlier versions of discuz, the request array after php 5.3 does not contain $ _ cookie, leading to variable overwrite, resulting in preg_replace command execution. For details about this problem, see WooYun: Discuz! Command Execution for two versions of foreground products (No Logon required)

Affected substation address:

Http://bbs.jj.cn/viewthread.php? Tid = 2424793 & extra = page % 3D1,

You only need to add the constructed cookie value, and any page can be executed by command

The previous figure proves
 

 

Solution:

Modify the settings in php. ini to make the request global data contain the cookie array.