Mao10CMS /Application/Control/Controller/WeixinController.class.php 任意文件下载漏洞

No description provided by source...

Mao10CMS /Application/Control/Controller/WeixinController.class.php SQL注入漏洞

/Application/Control/Controller/WeixinController.class.php if $tmpStr == $signature echo $echostr; $postStr = $GLOBALS"HTTPRAWPOSTDATA"; if !empty$postStr $postObj = simplexmlloadstring$postStr, 'SimpleXMLElement', LIBXMLNOCDATA; $fromUsername = $postObj-FromUserName; $toUsername =...