FengCMS本地文件包含一枚

- AV AC AU C I A
发布: 2025-04-13
修订: 2025-04-13

### 简要描述: LFI ### 详细说明: 条件:PHP<5.3.4 /app/controller/searchController.php: ``` public function index(){ if(!empty($_POST)){ if(URL_TYPE==1){ echo '<meta http-equiv="refresh" content="0;url='.(($_POST['project'])?'?controller=search&project='.$_POST['project'].'&tags='.$_POST['tags']:'/tags/'.$_POST['tags'].'.html').'">'; }else{ echo '<meta http-equiv="refresh" content="0;url=?controller=search'.(($_POST['project'])?'&project='.$_POST['project'].'&tags='.$_POST['tags']:'&tags='.$_POST['tags']).'.html">'; } }else{ if ($_GET['tags'] != '') { $encode = mb_detect_encoding ( $_GET['tags'], array ("ASCII", "UTF-8", "GB2312", "GBK", "BIG5" ) ); if ($encode != "UTF-8") { $_GET['tags'] = iconv ( "gb2312", "UTF-8", $_GET['tags'] ); } } if($_GET['tags']){ if($_GET['project']!=""){ return $this->display($_GET['project'].'_search.html'); }else{ return $this->display('search.html'); } }else{ echo '<script type="text/javascript">alert("请输入关键词!");history.go(-1)</script>'; } } } } ```...

0%
暂无可用Exp或PoC
当前有0条受影响产品信息