PHP模板引擎函数黑名单过滤缺失导致RCE漏洞

漏洞概述 该漏洞涉及模板引擎中补充全的函数黑名单加载问题。具体表现为在 文件中，对 变量的赋值进行了修改，增加了更多的危险函数和字符，可能导致代码注入或执行恶意代码。 影响范围 文件路径： 受影响版本：从 到 修复方案 修复提交： 修复内容：在 变量中增加了更多的危险函数和字符，以增强对潜在恶意代码的过滤。 POC代码 ```php $filter = '<?php eval($_server[\'assert\'][\'get\'][\'post\'][\'request\'][\'cookie\'][\'session\'][\'input\'][\'env\'][\'config\'][\'call\'][\'global\'][\'dump\'][\'print\'][\'phpinfo\'][\'fp\'][\'fopen\'][\'global\'][\'chr\'][\'str\'][\'pack\'][\'system\'][\'gzuncompress\'][\'shell\'][\'base64\'][\'file\'][\'proc\'][\'preg\'][\'call\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\']

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

PHP模板引擎函数黑名单过滤缺失导致RCE漏洞

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

PHP模板引擎函数黑名单过滤缺失导致RCE漏洞

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！