{"width":"100%","provider_url":"https://hatena.blog","author_url":"https://blog.hatena.ne.jp/Fushihara/","provider_name":"Hatena Blog","version":"1.0","url":"https://fushihara.hatenadiary.jp/entry/archives/1049","image_url":null,"categories":["\u672a\u5206\u985e"],"height":"190","published":"2012-12-31 04:54:39","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Ffushihara.hatenadiary.jp%2Fentry%2Farchives%2F1049\" title=\"php\u306eCURLOPT_POSTFIELDS\u306b\u914d\u5217\u3092\u6e21\u3059\u3068@\u304b\u3089\u59cb\u307e\u308b\u30c6\u30ad\u30b9\u30c8\u3092\u30d5\u30a1\u30a4\u30eb\u540d\u3068\u3057\u3066\u8aad\u307f\u8fbc\u3080\u4e8b\u306b\u3064\u3044\u3066 - Fushihara\u2019s blog\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","blog_title":"Fushihara\u2019s blog","blog_url":"https://fushihara.hatenadiary.jp/","title":"php\u306eCURLOPT_POSTFIELDS\u306b\u914d\u5217\u3092\u6e21\u3059\u3068@\u304b\u3089\u59cb\u307e\u308b\u30c6\u30ad\u30b9\u30c8\u3092\u30d5\u30a1\u30a4\u30eb\u540d\u3068\u3057\u3066\u8aad\u307f\u8fbc\u3080\u4e8b\u306b\u3064\u3044\u3066","description":"$ch = curl_init(\"http://...\"); curl_setopt($ch,CURLOPT_POSTFIELDS,[\"message\"=>$_POST[\"msg\"]]); \u3053\u306e\u5834\u5408\u3001$POST[\"msg\"]\u304c\"@/etc/passwd\"\u7b49@\u304b\u3089\u59cb\u307e\u308b\u6587\u5b57\u5217\u3060\u3063\u305f\u5834\u5408\u3001\u30b5\u30fc\u30d0\u30fc\u5185\u306e\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u304c\u9001\u4fe1\u3055\u308c\u308b\u304b\u3089\u6ce8\u610f\u3002\"@/etc/passwdhoge\"\u3067\u3082\u901a\u308b\u3002 \u53d7\u3051\u53d6\u308b\u6642$POST[\"message\"]\u3067\u306f\u306a\u304f$FILES[\"message\"]\u306b\u306a\u308b\u304b\u3089\u305d\u306e\u307e\u307e\u8868\u793a\u3055\u308c\u308b\u307f\u305f\u3044\u306a\u4e8b\u306f\u307e\u305a\u306a\u3044\u3068\u601d\u3046\u3051\u3069\u3002 \u53d7\u3051\u53d6\u308b\u5074\u304cphp\u4ee5\u5916\u3060\u3063\u305f\u3089\u77e5\u3089\u306a\u3044\u3002\u81ea\u52d5\u7684\u306b$FILES\u306e\u4e2d\u8eab\u3082\u5c55\u958b\u2026","type":"rich","author_name":"Fushihara"}