tccms v8 注入一枚

简要描述： 过滤不严。 详细说明： 在app/controller/picture.class.php 中 public $objName = 'picture'; public function all $Obj = M$this-objName; $categoryObj = M"category"; $Obj-pageSize = 20; $where = "1=1"; $key = $POST'key'; $cid = $GET'cid'; if $key != "" $where .= " and id = '" . $key . "' or title like...

Galette <=0.63 picture.class.php SQL注入漏洞

No description provided by source...

Galette <=0.63.3 picture.class.php文件任意文件写入漏洞

No description provided by source...