Webshell in Emlog background and Solutions

Create a new muma. php file and place a sentence, and then create a muma folder.

Then rar is the zip suffix.

Go to the background

Install plug-ins

Upload a zip file
Content/plugins/muma. php is the path of the topic package.

One-sentence connection

I checked the official demo version.

This vulnerability has long been known on the official website, but it is a normal requirement of users. I have not tested the versions earlier than 4.2.1. If this plug-in is installed, this should be done by killing all versions of emlog.

Temporary solutionYes:

After installing the plug-in each time, you cannot write the content/plugins directory settings. The directory has been submitted to the official website and will wait for the official website to provide a new fix.

The author left tears for three years