PHPCMS background enterprise template upload SHELL

The backend can directly upload the PHP Trojan. The principle is very simple.
Click "Enterprise template management" to add an enterprise template. Add a ZIP package. Put a PHP trojan in the ZIP package. You will understand it later. The decompression path is in
The trojan path is in the cached file.
/Caches/caches_yp/uptemplate/Trojan name. php
If decompression is successful
Phpcms \ templates \ default \ yp \ template directory/Trojan name. php (the name is self-written)


 

Http://www.chcw.com.cn/caches/caches_yp/uptemplate/phpspy.php evidence!

Solution:

Check the name of the uploaded file. Rename required!