zb_system/function/lib/upload.php Detonating physical path

[SameleTom]

location: zb_system/function/lib/upload.php

Code：

class Upload extends Base {

Rows:8

Return error ：

Fatal error: Class 'Base' not found in /www/wwwroot/zb_system/function/lib/upload.php on line 8

Harm：

Web site physical path leakage .

conditions for execution：

Normal access can

Edition：

Z-BlogPHP 1.5.1 Zero

Cause the cause ：

Class 'Base' not found ， Introducing an exception to cause path leakage

Poc:127.0.0.1/zb_system/function/lib/upload.php

[zsxsoft]

Thanks, we will fix it as soon as possible.