dede getshell exp + temporary patch-vulnerability warning-the black bar safety net

ID MYHACK58:62201444699
Type myhack58
Reporter Yaseng
Modified 2014-04-15T00:00:00


dede good fire old cassock also to scrape together a lively. In fact getshell many methods do not always tangled how to insert mytag table such as near myad table is a good place to update a word did not say more not much to say directly to the getshell exp.

getshell exp

To change the password what direct modified 1. txt.



**Temporary patch

**Don't know the place there is no coverage variable anyway this exploit is to repair the test under seemingly does not affect the site operation include/dedesql.class.php

if(isset($GLOBALS['arrs1'])) { $v1 = $v2 = "; for($i=0;isset($arrs1[$i]);$i++) { $v1 .= chr($arrs1[$i]); } for($i=0;isset($arrs2[$i]);$i++) { // $v2 .= chr($arrs2[$i]); //comment here } $GLOBALS[$v1] .= $v2; }