Use SCANV for Vulnerability Detection and Analysis HDWiki 5.1 Backdoor

In the morning, I woke up and saw a prompt from chuangyu that HDWiki 5.1 had a backdoor. As a security vendor, chuangyu immediately proposed his own online Vulnerability Detection Method. However, we can use his scan to analyze logs to find out the backdoor. First, we use his online scanning function (http://www.scanv.com/tools/) to scan their own web address has permissions, but the user to view the log. GET/style/default/admin/open.gif GET/javaske/style/default/admin/open.gif GET/wiki/style/default/admin/open.gif we will find the above get request, then directly find the corresponding file and you will find that these images contain the php one-sentence Trojan code and password is hd. Then, if the include and so on, "you don't know the specifics. The name of this image reminds me of the ID of a friend ····.