Official website of golden tracing cartoon

At the invitation of the administrator today, the Administrator first opened the website to check whether there was a vulnerability on the official website.

After reading the website interface, the page is still very good, that is, the loaded video is too stuck.

Open it and check that it's PHP.

It also includes a forum, where the forum and website are not a server, and there are no DZ vulnerabilities.

Finally, I returned to the main site and saw the member center. Then I opened the site and found the vulnerability.

Then we got webshell.

 

Keep a file on the homepage

Then the system helped the Administrator fix the vulnerability.