search

havok89 / Hoosk

Hoosk Codeigniter CMS
http://hoosk.org
Other
128 stars 87 forks source link

Arbitrary code execution on V1.7.0 #46

Open Hu3sky opened 6 years ago

Hu3sky commented 6 years ago

When install the Hoosk，you can put the code ')phpinfo();// in the SiteUrl,then,visit the /config.php,you can get the phpinfo page. tim 20180818170709 tim 20180818171237

Hu3sky commented 6 years ago

');phpinfo();//