Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

There is a improper configuration leads to getshell #17

Closed
zyfyc opened this issue Feb 14, 2019 · 1 comment
Closed

There is a improper configuration leads to getshell #17

zyfyc opened this issue Feb 14, 2019 · 1 comment

Comments

@zyfyc
Copy link

zyfyc commented Feb 14, 2019

There is a improper configuration leads to getshell.
poc:
first,let's sign in our indexhibit CMS,then we can see this choice "Assets":

3_0

so,we can modify the plugins,include php files.ok,let's modify:

3

we can use knife to connect:

4

@Vaska
Copy link
Collaborator

Vaska commented Feb 21, 2019

Fixed.

@Vaska Vaska closed this as completed Feb 21, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants