discuz漏洞整理

---恢复内容开始---
http://tita.qq.com/bbs/config/config_global.php.bak
http://tita.qq.com/bbs/config/config_global.php~
http://tita.qq.com/bbs/config/config_ucenter.php~
http://tita.qq.com/bbs/config/config_ucenter.php.bak
http://bbsuc.duba.net/data/config.inc.php.bak
http://bbsuc.duba.net/config.inc.php.bak

匹配特征：

<?php
$_config = array();
// ---------------------------- CONFIG DB ----------------------------- //
$_config['db']['1']['dbhost'] = 'localhost';
$_config['db']['1']['dbuser'] = 'root';
$_config['db']['1']['dbpw'] = '62***29';
$_config['db']['1']['dbcharset'] = 'gbk';
$_config['db']['1']['pconnect'] = '0';
$_config['db']['1']['dbname'] = 'bbs_iappsafe';
$_config['db']['1']['tablepre'] = 'safe_';
$_config['db']['common']['slave_except_table'] = '';

code 区域

<?php
define('UC_CONNECT', 'mysql');
define('UC_DBHOST', '114.112.**.***');
define('UC_DBUSER', 'root');
define('UC_DBPW', 'kingsoft***11');
define('UC_DBNAME', 'dybiduba');
define('UC_DBCHARSET', 'gbk');
define('UC_DBTABLEPRE', '`dybiduba`.cdb_uc_');
define('UC_DBCONNECT', 0);
define('UC_CHARSET', 'gbk');
define('UC_KEY', 'q8c8X96253G0d8*****************aB4H8G2k1Gbb0GbA589mc');
define('UC_API', 'http://bbs.duba.net/uc_server');
define('UC_APPID', '1');
define('UC_IP', '114.112.36.184');
define('UC_PPP', 20);

2.产品名：Discuz!应用开发助手
安装量较高，此处分析此产品可getshell的一个部分。

疯狂暗示打赏按钮

本文标签：

声明：本文由代码号注册/游客用户【刘尉】供稿发布，本站不对用户发布的discuz漏洞整理信息内容原创度和真实性等负责。如内容侵犯您的版权或其他权益，请留言并加以说明。站长审查之后若情况属实会及时为您删除。同时遵循 CC 4.0 BY-SA 版权协议，尊重和保护作者的劳动成果，转载请标明出处链接和本声明内容。本文作者：刘尉» https://www.ebingou.cn/dmh/16259.html

很赞哦！ ()