Discuz! X2 background chicken ribs include [very chicken ribs] in a specific environment, shell can be used

Someone asked Discuz! How to use shell in X2, I downloaded a Discuz! Try X2 Release 20130201

Discuz found! The X2 background contains very, very, and very chicken ribs. The following conditions are used to compare the chicken ribs:

Because the suffix of the contained file is limited to *. htm, to use this inclusion, you must satisfy any of the following conditions:

1. If % 00 truncation exists, everyone on Earth knows it. The Trojan file is uploaded at the front end, and the file name contains the truncated file name.

2. If other programs or plug-ins are installed, the htm file containing php code can be generated and the code in htm can be directly included.

Included location:

Portal --> Create a topic

The template name is changed to the address of the file to be included using the browser's review element function. Because the apache version installed on my local machine is relatively high, there is no truncation, I directly wrote a t.htm file in the root directory. The content is <? Php phpinfo ();?> For demonstration.

After submission, the code in t.htm is successfully executed. The location of this file can be arbitrary. I have not found a way to generate htm without a plug-in, so it is quite tricky. File truncation.

 

Thank you for coming!