A critical vulnerability in the Discuz app led to the leakage of database information

Little scum · Posted on 4/15/2015 10:40:57 PM

Open the link, you can see Anmi's database information, all installed as long as you replace the above link with your own address, you can see your own database information.

The following is the plan given by Anmi
1. Open mobcent/app/components/Mobcent.php
2. Put 25 rows

define('MOBCENT_HACKER_UID', true);

Modified to

define('MOBCENT_HACKER_UID', false);

Here are the temporary solutions:
Open mobcent/app/controllers/TestController.php. Comment lines 33 and 38.
That is, amend to:

public function actionPhpInfo() {
//phpinfo();
}

public function actionConfig() {
echo '<pre>';
// print_r(Yii::app());
echo '</pre>';
}

wangxl1203 · Posted on 6/27/2018 10:13:23 AM

I just want to do marketing and this

Theoran · Posted on 6/27/2018 6:02:45 PM

/(ㄒoㄒ)/~~

[Security Vulnerability] A critical vulnerability in the Discuz app led to the leakage of database information

Related Posts

Sections viewed