Rewards Taobao customers for any file reading defects and repair in the background

Brief description:
 
The scanning Trojan function is available in the background. You can view the task file source code.
 
Detailed description:
 
Attackers can exploit the injection vulnerability to read database configuration files, such as social engineering. Two successful social workers were tested. I encountered some problems with shell, and the machine is still being tested.
Proof of vulnerability:
 

Read files:
Http://www.bkjia.com/admin/scan. php? M = edit & filename = .././comm/conn. php
 
 
 
Solution:
 
The file is encrypted.
Author 08 fans