There is an arbitrary file writing vulnerability in the HYBBS production plugin function

[shmilylty]

There is an arbitrary file writing vulnerability in the HYBBS production plugin function

Vulnerability overview

There is an arbitrary file writing vulnerability in the HYBBS management background making plugin function, which leads to the server permission being obtained.

Vulnerability scope

All versions prior to HYBBS 2.3.3

Vulnerability environment construction

Clone the latest code factory library of HYBBS to the local, and then use phpstudy to build HYBBS.

Vulnerability reproduction steps

Fill in test', phpinfo(),' in the plugin description, and click the OK button.

Then it will prompt that the plugin was created successfully

From the folder monitoring software log, you can see that the program created the malicious file conf.php

Vulnerability code analysis

Locate the code that makes the plug-in function

It can be seen that the program directly writes the plugin-related configuration information to conf.php without any security filtering, resulting in an arbitrary file writing vulnerability.