Discuz! X2 background chicken ribs include [very chicken ribs] in a specific environment, shell can be used

Source: Internet
Author: User

Someone asked Discuz! How to use shell in X2, I downloaded a Discuz! Try X2 Release 20130201

Discuz found! The X2 background contains very, very, and very chicken ribs. The following conditions are used to compare the chicken ribs:

Because the suffix of the contained file is limited to *. htm, to use this inclusion, you must satisfy any of the following conditions:

1. If % 00 truncation exists, everyone on Earth knows it. The Trojan file is uploaded at the front end, and the file name contains the truncated file name.

2. If other programs or plug-ins are installed, the htm file containing php code can be generated and the code in htm can be directly included.

Included location:

Portal --> Create a topic

The template name is changed to the address of the file to be included using the browser's review element function. Because the apache version installed on my local machine is relatively high, there is no truncation, I directly wrote a t.htm file in the root directory. The content is <? Php phpinfo ();?> For demonstration.


After submission, the code in t.htm is successfully executed. The location of this file can be arbitrary. I have not found a way to generate htm without a plug-in, so it is quite tricky. File truncation.




 

Thank you for coming!

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.