PHP Template Engine RCE via Incomplete Function Blacklist Filtering (application/admin/controller/Template.php)

脆弱性概要 この脆弱性は、テンプレートエンジンにおける補完的な関数ブラックリストの読み込み問題に関係しています。具体的には、 ファイル内で、 変数への代入が変更され、より多くの危険な関数や文字が追加されました。これにより、コードの注入や悪意あるコードの実行が生じる可能性があります。 影響範囲 ファイルパス： 影響を受けるバージョン： から まで 修正方案 修正コミット： 修正内容： 変数に、潜在的な悪意あるコードに対するフィルタリングを強化するために、より多くの危険な関数や文字が追加されました。 POCコード ```php $filter = '<?php eval($_server[\'assert\'][\'get\'][\'post\'][\'request\'][\'cookie\'][\'session\'][\'input\'][\'env\'][\'config\'][\'call\'][\'global\'][\'dump\'][\'print\'][\'phpinfo\'][\'fp\'][\'fopen\'][\'global\'][\'chr\'][\'str\'][\'pack\'][\'system\'][\'gzuncompress\'][\'shell\'][\'base64\'][\'file\'][\'proc\'][\'preg\'][\'call\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][\'restore\'][\'ini\'][\'set\'][\'ini\'][\'get\'][\'ini\'][

目標達成すべての支援者に感謝 — 100%達成しました！

PHP Template Engine RCE via Incomplete Function Blacklist Filtering (application/admin/controller/Template.php)

このソースからの他の記事

目標達成 すべての支援者に感謝 — 100%達成しました！

PHP Template Engine RCE via Incomplete Function Blacklist Filtering (application/admin/controller/Template.php)

このソースからの他の記事

目標達成すべての支援者に感謝 — 100%達成しました！