Phpcms v9 poster_click function Injection Vulnerability (both GBK and utf8 exist) (fixed)

I. Vulnerability principle:

Vulnerability exists in the poster Module
Upload at on January 11 Download Attachment(65 KB)
We can control HTTP_REFERER and it is not controlled by magic_quotes_gpc. Therefore, the SQL statement can be successfully injected, resulting in the SQL injection vulnerability.


Ii. Vulnerability exploitation effects and hazards:
This vulnerability exists in the latest Phpcms v9 version. The following is the test result of the official demo site.
Upload Download Attachment(111.28 KB)
Query the mysql database version of the website by constructing an SQL statement.

Iii. solution:
Download the latest update package from the official website.
Http://download.phpcms.cn/v9/9.0/patch/