Murder Case 2 caused by Guangdong building Vulnerability (getshell information leakage of hundreds of users nationwide)

Murder Case 2 caused by Guangdong building Vulnerability (getshell information leakage of hundreds of users nationwide)

You can upload any file in the background using getshell.

Add a link to upload the problem file and upload a sentence directly.
 

Http://www.guangdong-hotel.com/uploads/link/20150303094308649_begin.php

Hundreds of databases can be deprecated and are commercial hotels all over the country
 

The folder contains the source code of all commercial hotels.
 

 

Upload the trojan and test the Elevation of Privilege:

 

 

 

 

A large amount of information is exposed and users have the permission to modify user information. The problem is very serious. If data is damaged or maliciously modified, the consequences will be unimaginable.