Didcuz memcache+ssrf GETSHELL©Q

ղ Ո

©ӁԴƶ

©QDidcuz memcache+ssrf GETSHELL©

©DiscuzSSRF©memcacher߿ssrfͨ^memcacheDűPόWEBSHELLaĶй©

©ļ/source/function/function_core.PHP

ޏͷ

λã

function output_replace($content) {

//....

// ̎Ӄ

if (preg_match("(/|#|\+|%).*(/|#|\+|%)e", $_G['setting']['output']['preg']['search']) !== FALSE) { die("request error"); }

$content = preg_replace($_G['setting']['output']['preg']['search'], $_G['setting']['output']['preg']['replace'], $content);

}

޸ςQԭļ


ԓ0˅cuՓ

ՈluՓ

ȫuՓ

SEOվL]

ע^ԃھAӆעu
( //www.uula.cn)
QQȺ942102208

cba̹㶫 © 2011-2020   cba̹㶫

      ȫ“JC