PHPstudy2018 simply use the back door

At the outset, only recorded use.

Test php-5.4.45 + Apache

 

 

 

index.php 

 

 

Using the Firefox browser, you can edit and resend http request

 

 

 

Print out "net user" ciphertext is encrypted base64

 

 

 

 

 

 

 

 

 

 

 

Local "net user"

 

 

 

 

Printed out by the above ciphertext, submitted

-Encoding the Accept: the gzip, the deflate
the Accept-charset: ******
(as indicated by the arrows, please remove spaces)

 

 

 

 

 

 

Consistent with local content ...

 

 

 

 

The vulnerabilities affect version follows

 

 

After the door case officer had declared resolved, users have the back door, update the latest version as soon as possible.

Please look for the official download channels https://www.xp.cn/