Lucene search
K

Php168 v 4.0 sp global.php 写入漏洞

🗓️ 17 Jul 2007 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 38 Views

Global.php login vulnerability allows malicious code injectio

Code

                                                哈哈,这就是我要找的了,我开始考虑构造的问题,由于前面有<?php,所以要用?>结束掉前面的脚本标记,可是问题又来了

$logdb[]=\"$username\\t$password\\t$timestamp\\t$onlineip\";

在$username之前有个极其讨厌的”号,必须要再写入一个”来关闭它,可是默认设置下写入”或者’会在前面加上\\,从而变成\\”,双引号也就没用了.
这个问题困扰了我5个小时,凌晨4点
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jul 2007 00:00Current
7.1High risk
Vulners AI Score7.1
38