ECSHOP cross-site + Background File Inclusion = Getshell

0x1 The linkman parameter of the out-of-stock registry is not encoded when the member center is added to view details in the background, resulting in Cross-Site authentication .. 0x2 ecshop background integrate. PHP files are basically contained in files starting from 80th .. you can access http: // localhost: 8082/ECShop_V2.7.3/admin/integrate. php? Act = install & code = .. /.. /.. /.. /ECShop_V2.7.3/data/feedbackimg/6_20130506toqbvy.txt % 00 to include our files. However, if you need background permissions, your own character will be taken for truncation .. 0x3 we can upload a text file in the left-side Navigation Pane, and allow the Administrator to access the included files through cross-site access to getshell ..
Solution:

Fix cross-site and file inclusion in the background