Initial Crucco master site Arbitrary Code Execution

At the beginning, ecshop was used, but the programmer's secondary development was too casual, resulting in problems... Http://www.crucco.com/huodongye.php? Pn = zucefangsi here we find that the pn value is not specified and can be submitted at will. We infer that the programmer should write the following code $ smarty-> display ($ _ GET ['P']); we found the display method in ecshop and found that eval function _ eval ($ content) {ob_start (); eval ('? '.'> '. Trim ($ content); $ content = ob_get_contents (); ob_end_clean (); return $ content;} we submit the following url: http://www.crucco.com/huodongye.php? Pn = str: % 3C? Php % 20 phpinfo % 28% 29; // The cute phpinfo is displayed.Solution:

Specify the pn value