当前位置：WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号：wooyun-2014-084973

漏洞标题：边锋游戏茶苑游戏官网被植入木马与博彩（已经沦为马场）

相关厂商：边锋网络

漏洞作者： 路人甲

提交时间：2014-11-28 11:46

修复时间：2015-01-12 11:48

公开时间：2015-01-12 11:48

漏洞类型：成功的入侵事件

危害等级：高

自评Rank：20

漏洞状态：厂商已经确认

漏洞来源： http://www.wooyun.org，如有疑问或需要帮助请联系 [email protected]

Tags标签： 无

4人收藏 收藏
分享漏洞：

漏洞详情

披露状态：

2014-11-28： 细节已通知厂商并且等待厂商处理中
2014-12-01： 厂商已经确认，细节仅向厂商公开
2014-12-11： 细节向核心白帽子及相关领域专家公开
2014-12-21： 细节向普通白帽子公开
2014-12-31： 细节向实习白帽子公开
2015-01-12： 细节向公众公开

简要描述：

边锋游戏茶苑游戏官网被植入木马与博彩（已经沦为马场）

详细说明：

发现被植入了菠菜，通过扫描发现一句话木马。
http://www.gametea.com

OS version ?Linux version 2.6.9-89.ELsmp ([email protected]) (gcc version 3.4.6 20060404 (Red Hat 3.4.6-11)) #1 SMP Mon Apr 20 10:34:33 EDT 2009
Distr name ?Red Hat Enterprise Linux AS release 4 (Nahant Update 8)
Kernel \r on an \m
Userful ?gcc, lcc, cc, ld, make, php, perl, python, ruby, tar, gzip, bzip, bzip2, nc, locate, suidperl
Danger ?kav, nod32, bdcored, uvscan, sav, drwebd, clamd, rkhunter, chkrootkit, iptables, ipfw, tripwire, shieldcc, portsentry, snort, ossec, lidsadm, tcplodg, sxid, logcheck, logwatch, sysmask, zmbscap, sawmill, wormscan, ninja
Downloaders ?wget, fetch, lynx, links, curl, get, lwp-mirror


http://gametea.com/gamecms/base.php---------------gamecms
Hosts ?# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
218.74.116.241 my.gametea.com
115.182.68.29 schemas.xmlsoap.org
115.182.68.29 gametea.com
115.182.68.29 app.gametea.com
114.80.99.53 hps.bianfeng.com
#114.80.99.53 reguser.bianfeng.com
222.73.72.53 reguser.bianfeng.com
115.182.68.29 www.gametea.com
60.191.38.222 mail.bianfeng.com
74.125.25.109 smtp.gmail.com
123.58.178.204 smtp.163.com
122.228.113.110 match.gametea.com
180.153.248.47 bfas.bianfeng.com
122.224.172.79 adtaste.pceggs.com
HDD space ?Filesystem Size Used Avail Use% Mounted on
/dev/sda3 28G 23G 3.1G 89% /
/dev/sda1 99M 12M 82M 13% /boot
none 1014M 0 1014M 0% /dev/shm
Mount options ?# This file is edited by fstab-sync - see 'man fstab-sync' for details
LABEL=/ / ext3 defaults 1 1
LABEL=/boot /boot ext3 defaults 1 2
none /dev/pts devpts gid=5,mode=620 0 0
none /dev/shm tmpfs defaults 0 0
none /proc proc defaults 0 0
none /sys sysfs defaults 0 0
LABEL=SWAP-sda2 swap swap defaults 0 0
/dev/hdc /media/cdrecorder auto pamconsole,exec,noauto,managed 0 0
/dev/fd0 /media/floppy auto pamconsole,exec,noauto,managed 0 0

Processed in 0.421189 second(s) Powered by PhpSpy 2011. Copyright (C) 2004-2011 Security Angel Team [S4T] All Rights Reserved.

漏洞证明：

QQ图片20141127154207.png

QQ图片20141127154045.jpg

QQ图片20141127153932.jpg

chan3333.jpg

cha2222.jpg

chan444.jpg

cha555.jpg

8154416.jpg

}XE1L8NKQXT`03RKLPCNT`M.jpg


'hostname' => '192.168.136.110',
'database' => 'gc_test_default',
'username' => 'webuser',
'password' => '123321',
'tablepre' => 'act_',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'data' => array (
'hostname' => '192.168.136.110',
'database' => 'gc_test_default',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'award_lua' => array (
'hostname' => '192.168.136.110',
'database' => 'gc_test_default',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'ads' => array (
'hostname' => '192.168.136.110',
'database' => 'gc_test_default',
'username' => 'webuser',
'password' => '123321',
'tablepre' => 'ad_',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'logdb_5' => array (//茶苑手机绑定日志库
'hostname' => '180.153.248.21',
'database' => 'log_db',
'username' => 'props',
'password' => 'GameTea123987',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
),
'db241_teaframe' => array (//微支付订单
'hostname' => '60.190.79.154',
'database' => 'teaframe',
'username' => 'loguser',
'password' => 'gt06568',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
),
'db241_uchome' => array (//微支付订单
'hostname' => '60.190.79.154',
'database' => 'uchome',
'username' => 'loguser',
'password' => 'gt06568',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
),
'lishuimobile_logdb' => array (//移动手机绑定日志库 丽水移动sql server 2005服务器
'hostname' => 'sqlserver\SQLEXPRESS',
'database' => 'OpenMas',
'username' => 'OpenMas2',
'password' => '123456',
'tablepre' => 'dbo.COM_',
'charset' => 'utf-8',
'type' => 'mssql',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
),
'reg_logdb' => array (//茶苑注册日志
'hostname' => '61.153.26.86',
'database' => 'newsdb',
'username' => 'tongreglog',
'password' => 'reg06568',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
),
'wuziqi_logdb' => array (//五子棋划账日志
'hostname' => '60.190.79.158',
'database' => 'sk_db',
'username' => 'tong',
'password' => 'gt06568',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
),
'bank_logdb' => array (//钱庄转帐日志
'hostname' => '222.73.13.118',
'database' => 'sk_db',
'username' => 'tong',
'password' => 'tong06518',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
),
'depcard_logdb' => array (//充值接口日志
'hostname' => '61.153.26.90',
'database' => 'netbank',
'username' => 'tong',
'password' => 'dfdsf',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
),
'charge_logdb' => array (//快速充值订单
'hostname' => '60.190.79.154',
'database' => 'charge',
'username' => 'loguser',
'password' => 'gt06568',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
),
'v4_lobby' => array (//v4云端大厅安装量
'hostname' => '221.231.132.11',
'database' => 'v4_lobby',
'username' => 'tongjfv4',
'password' => 'Enliv',
'tablepre' => 'yp_',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
),
);
?>
'gtlog' => array (//茶苑手机绑定日志库
'hostname' => '61.172.241.5',
'database' => 'log_db',
'username' => 'props',
'password' => 'GameTea123987',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
?>
'default' => array (
'hostname' => '127.0.0.1',
'database' => 'gamecms_main',
'username' => 'gtadmin',
'password' => 'web06568',
'tablepre' => 'gc_',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
'cylife' => array (
'hostname' => '127.0.0.1',
'database' => 'gamecms_main',
'username' => 'gtadmin',
'password' => 'web06568',
'tablepre' => 'cylife_',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
'outdb' => array (
'hostname' => '127.0.0.1',
'config' => array (//公共游戏库配置
'hostname' => '192.168.136.110',
'database' => 'config',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'config_gt' => array (//茶苑数据库
'hostname' => '192.168.136.110',
'database' => 'config_gtx',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'config_new' => array (//新平台数据库
'hostname' => '192.168.136.110',
'database' => 'config_20',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'gc_log' => array (//新平台数据库
'hostname' => '192.168.136.110',
'database' => 'gc_test_default',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'charts' => array (//茶苑统计分析库
'hostname' => '222.73.13.112',
'database' => 'tj_db2',
'username' => 'tjuser',
'password' => 'tj#$#$3',
'tablepre' => 'stat_',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'cfg' => array (//茶苑统计分析库 财富游戏配置表cf_cfg
'hostname' => '222.73.13.112',
'database' => 'stat',
'username' => 'tjuser',
'password' => 'tj#$#$3',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'config' => array (//茶苑统计分析库 游戏配置列表
'hostname' => '61.172.241.7',
'database' => 'config',
'username' => 'tong',
'password' => 'tong159357',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'online' => array (//茶苑统计分析库 实时在线人数表online 游戏配置表game_conf
'hostname' => '61.152.98.5',
'database' => 'tj_db',
'username' => 'tong',
'password' => 'tong159357',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'conf2' => array (//自建游戏配置表game_conf2
'hostname' => '127.0.0.1',
'database' => 'config',
'username' => '',
'password' => 'web06568',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'hfstat' => array (//浩方统计分析库
'hostname' => '61.172.242.42',
'database' => 'tj_db',
'username' => 'props',
'password' => 'GameTea123987',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'sdstat' => array (//商都统计分析库
'hostname' => '210.51.31.110',
'database' => 'hn_sd',
'username' => 'props',
'password' => 'tong159357',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'servicelog' => array (//webservic茶苑认证接口使用日志
'hostname' => '127.0.0.1',
'database' => 'servicelog',
'username' => 'loguser',
'password' => 'service06568',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'props' => array (//兑换券
'hostname' => '61.172.242.42',
'database' => 'props',
'username' => 'props',
'password' => 'GameTea123987',
'tablepre' => 'shop_',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'file1' => array (
'type' => 'file',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
),
'template' => array (
'hostname' => '127.0.0.1',
'port' => 11211,
'timeout' => 0,
'type' => 'memcache',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
'file' => array (
'type' => 'file',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
),
'memcache' => array (
'hostname' => '127.0.0.1',
'port' => 11211,
'timeout' => 0,
'type' => 'memcache',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
'config' => array (//公共游戏库配置
'hostname' => '192.168.136.110',
'database' => 'config',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'config_gt' => array (//茶苑数据库
'hostname' => '192.168.136.110',
'database' => 'config_gtx',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'config_new' => array (//新平台数据库
'hostname' => '192.168.136.110',
'database' => 'config_20',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'gc_log' => array (//新平台数据库
'hostname' => '192.168.136.110',
'database' => 'gc_test_default',
'username' => 'webuser',
'password' => '123321',
'tablepre' => '',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => false,
'pconnect' => 0,
'autoconnect' => 0
'file' => array (
'type' => 'file',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
'memcache' => array (
'hostname' => '127.0.0.1',
'port' => 11211,
'timeout' => 0,
'type' => 'memcache',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
'database' => 'gamecms_main',
'username' => 'gtadmin',
'password' => 'web06568',
'tablepre' => 'gc_',
'charset' => 'latin1',
'type' => 'mysql',
'debug' => true,
'pconnect' => 0,
'autoconnect' => 0
下载地址HTTP qpftp.bianfeng.com/GameTea/download/gametea2014.exe
在前现加个把前面的HTTP改成FTP直接无授权访问，源码泄一堆堆。

佣兵55213.png


里面有盛大的上千款游戏客户端。目测吧，我没数过。有端必有源码在，好像是这样吧。没翻来看，要想知道真假还得去弄来看。不过点到为止
/home/gametea/DEFAULT.php | 2014-11-01 19:06:25 | 找到PHP一句话木马!!!@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
/home/gametea/DEFAULT.php | 2014-11-01 19:06:25 | 高危文件*****************
/home/gametea/uploadfile/plus.php | 2014-11-01 09:49:32 | 高危文件*****************
/home/gametea/uploadfile/1/2014/0505/ww/res/logi.php | 2014-11-10 05:42:32 | 高危文件*****************
/home/gametea/uploadfile/1/2014/0505/ww/res/logi.php | 2014-11-10 05:42:32 | 文件可能被加密!!!
/home/gametea/uploadfile/1/2014/0505/ww/c.php | 2014-11-07 20:17:41 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/uploadfile/1/2014/0505/ww/c.php | 2014-11-07 20:17:41 | 高危文件*****************
/home/gametea/uploadfile/2013/0602/20130602045110335.php | 2014-11-01 06:10:37 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/uploadfile/2013/0602/20130602045110335.php | 2014-11-01 06:10:37 | 高危文件*****************
/home/gametea/uploadfile/2013/0602/20130602045110335.php | 2014-11-01 06:10:37 | 文件可能被加密!!!
/home/gametea/system_statics/j/kindeditor/php/upload_json.php | 2012-04-19 06:14:47 | 高危文件*****************
/home/gametea/system_statics/j/kindeditor/php/JSON.php | 2012-04-18 08:26:25 | 高危文件*****************
/home/gametea/system_statics/j/kindeditor/php/file_manager_json.php | 2012-04-18 08:26:25 | 高危文件*****************
/home/gametea/mysqlt.php | 2014-11-01 06:41:20 | 高危文件*****************
/home/gametea/mysqlt.php | 2014-11-01 06:41:20 | 文件可能被加密!!!
/home/gametea/sub_project/ads/config/db.ini.php | 2012-04-18 08:21:54 | 高危文件*****************
/home/gametea/sub_project/ads/config/core.ini.php | 2012-04-18 08:21:54 | 高危文件*****************
/home/gametea/sub_project/ads/config/cache.ini.php | 2012-04-18 08:21:54 | 高危文件*****************
/home/gametea/sub_project/ads/core/common/functions.php | 2012-04-18 08:21:58 | 高危文件*****************
/home/gametea/sub_project/ads/core/common/config.php | 2012-04-18 08:21:58 | 高危文件*****************
/home/gametea/sub_project/ads/core/library/DB/driver/DB_mysql.class.php | 2012-04-18 08:21:54 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/sub_project/ads/core/library/DB/driver/DB_mysql.class.php | 2012-04-18 08:21:54 | 高危文件*****************
/home/gametea/sub_project/ads/core/library/DB/DB.class.php | 2012-04-18 08:21:54 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/sub_project/ads/core/library/DB/DB.class.php | 2012-04-18 08:21:54 | 高危文件*****************
/home/gametea/sub_project/ads/core/library/core/model.class.php | 2012-04-18 08:21:55 | 高危文件*****************
/home/gametea/sub_project/ads/core/library/core/app.class.php | 2012-04-18 08:21:55 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/sub_project/ads/core/library/util/CacheFile.class.php | 2012-04-18 08:21:57 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/sub_project/ads/core/library/util/CacheFile.class.php | 2012-04-18 08:21:57 | 高危文件*****************
/home/gametea/sub_project/ads/core/library/util/cookie.class.php | 2012-04-18 08:21:57 | 高危文件*****************
/home/gametea/sub_project/ads/core/library/util/cookie.class.php | 2012-04-18 08:21:57 | 文件可能被加密!!!
/home/gametea/sub_project/ads/core/library/util/cache/cache_memcache.class.php | 2012-04-18 08:21:55 | 高危文件*****************
/home/gametea/sub_project/ads/core/library/util/cache/cache_file.class.php | 2012-04-18 08:21:55 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/sub_project/ads/core/library/util/cache/cache_file.class.php | 2012-04-18 08:21:55 | 高危文件*****************
/home/gametea/sub_project/ads/core/library/util/router.class.php | 2012-04-18 08:21:57 | 高危文件*****************
/home/gametea/sub_project/ads/core/library/util/cache.class.php | 2012-04-18 08:21:57 | 高危文件*****************
/home/gametea/sub_project/ads/templates/html.tpl.php | 2012-04-18 08:21:59 | 高危文件*****************
/home/gametea/sub_project/ads/action/index_action.class.php | 2012-04-18 08:21:58 | 高危文件*****************
/home/gametea/sub_project/ads/action/index_action.class.php | 2012-04-18 08:21:58 | 文件可能被加密!!!
/home/gametea/game/gamerule.php | 2011-02-14 09:06:56 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/game/index.php | 2012-05-02 08:57:58 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/game/leftnews.php | 2010-09-10 02:18:52 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/ww/c.php | 2014-11-07 14:54:45 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/ww/c.php | 2014-11-07 14:54:45 | 高危文件*****************
/home/gametea/adminer.php | 2014-11-01 16:03:46 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/adminer.php | 2014-11-01 16:03:46 | 高危文件*****************
/home/gametea/adminer.php | 2014-11-01 16:03:46 | 文件可能被加密!!!
/home/gametea/game_cmsxdata/news/help.php | 2014-11-05 04:44:46 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/game_cmsxdata/news/help.php | 2014-11-05 04:44:46 | 高危文件*****************
/home/gametea/game_cmsxdata/news/help.php | 2014-11-05 04:44:46 | 文件可能被加密!!!
/home/gametea/data_xiaosan/plus.php | 2014-11-07 02:53:26 | 高危文件*****************
/home/gametea/ntunnel_mysql.php | 2014-11-03 18:08:51 | 高危文件*****************
/home/gametea/home/gametea/zipfile/bdata/safemod/a1.php | 2014-11-05 08:47:10 | 高危文件*****************
/home/gametea/home/gametea/bdata/pimao/1238499/mage.php | 2014-11-06 12:36:35 | 高危文件*****************
/home/gametea/home/gametea/bdata/safemod/cates/a1.php | 2014-11-05 08:46:28 | 高危文件*****************
/home/gametea/home/gametea/inc/web.php | 2014-11-05 03:14:41 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/home/gametea/inc/web.php | 2014-11-05 03:14:41 | 高危文件*****************
/home/gametea/home/gametea/inc/web.php | 2014-11-05 03:14:41 | 文件可能被加密!!!
/home/gametea/home/gametea/langs/mage.php | 2014-11-05 15:09:48 | 高危文件*****************
/home/gametea/home/gametea/langs/mages.php | 2014-11-05 15:06:56 | 高危文件*****************
/home/gametea/home/gametea/zip/games/mage.php | 2014-11-05 15:21:04 | 高危文件*****************
/home/gametea/home/gametea/bd/news/tags.php | 2014-11-06 12:02:14 | 高危文件*****************
/home/gametea/home/gametea/bd/news/tags.php | 2014-11-06 12:02:14 | 文件可能被加密!!!
/home/gametea/home/gametea/class/plus.php | 2014-11-01 14:21:50 | 高危文件*****************
/home/gametea/home/gametea/setsave/setsaves/mage.php | 2014-11-05 15:24:03 | 高危文件*****************
/home/gametea/home/gametea/images/view.php | 2014-11-01 09:49:01 | 高危文件*****************
/home/gametea/home/gametea/images/view.php | 2014-11-01 09:49:01 | 文件可能被加密!!!
/home/gametea/ku.php | 2014-10-31 15:56:34 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/ku.php | 2014-10-31 15:56:34 | 高危文件*****************
/home/gametea/ku.php | 2014-10-31 15:56:34 | 文件可能被加密!!!
/home/gametea/regediter.php | 2014-11-11 13:09:33 | 高危文件*****************
/home/gametea/movescore/help.php | 2013-05-17 09:31:46 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/movescore/help.php | 2013-05-17 09:31:46 | 高危文件*****************
/home/gametea/movescore/help.php | 2013-05-17 09:31:46 | 文件可能被加密!!!
/home/gametea/movescore/index.php | 2013-05-17 09:31:46 | 高危文件*****************
/home/gametea/movescore/do.php | 2013-01-23 16:18:01 | 高危文件*****************
/home/gametea/movescore/test.php | 2013-11-21 08:58:17 | 高危文件*****************
/home/gametea/yin.php | 2014-10-31 10:48:14 | 文件可能被加密!!!
/home/gametea/nusoap/class.soap_transport_http.php | 2010-04-26 08:38:08 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/nusoap/class.soap_transport_http.php | 2010-04-26 08:38:08 | 高危文件*****************
/home/gametea/nusoap/class.nusoap_base.php | 2010-04-26 08:38:08 | 高危文件*****************
/home/gametea/nusoap/class.soap_server.php | 2010-04-26 08:38:08 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/nusoap/class.soap_server.php | 2010-04-26 08:38:08 | 高危文件*****************
/home/gametea/nusoap/class.xmlschema.php | 2010-04-26 08:38:08 | 高危文件*****************
/home/gametea/nusoap/nusoap.php | 2010-04-26 08:38:08 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/nusoap/nusoap.php | 2010-04-26 08:38:08 | 高危文件*****************
/home/gametea/nusoap/nusoap.php | 2010-04-26 08:38:08 | 文件可能被加密!!!
/home/gametea/nusoap/class.soap_val.php | 2007-11-06 03:00:36 | 高危文件*****************
/home/gametea/nusoap/class.soap_fault.php | 2007-11-06 03:00:36 | 高危文件*****************
/home/gametea/nusoap/nusoapmime.php | 2010-04-26 08:38:08 | 高危文件*****************
/home/gametea/nusoap/class.wsdl.php | 2010-04-26 08:38:08 | 高危文件*****************
/home/gametea/nusoap/class.soap_parser.php | 2010-04-26 08:38:08 | 高危文件*****************
/home/gametea/nusoap/class.soap_parser.php | 2010-04-26 08:38:08 | 文件可能被加密!!!
/home/gametea/nusoap/class.soapclient.php | 2010-04-26 08:38:08 | 高危文件*****************
/home/gametea/nusoap/class.wsdlcache.php | 2007-11-06 03:00:36 | 高危文件*****************
/home/gametea/gamecms/base.php | 2012-04-18 08:25:52 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/base.php | 2012-04-18 08:25:52 | 高危文件*****************
/home/gametea/gamecms/library/template.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/soapclienttimeout.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/attachment.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/attachment.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/cache_memcache.class.php | 2014-07-23 08:18:25 | 高危文件*****************
/home/gametea/gamecms/library/phpmailer.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/phpmailer.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/ApiClient.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/memcached_client.class.php | 2011-07-08 04:41:49 | 高危文件*****************
/home/gametea/gamecms/library/session_mysql.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/session_mysql.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/param.class.php | 2013-11-01 05:36:34 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/param.class.php | 2013-11-01 05:36:34 | 高危文件*****************
/home/gametea/gamecms/library/api_soap.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/api_soap.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/cache_factory.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/smtp.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/session_memcache.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/mssql.class.php | 2012-04-13 05:53:13 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/mssql.class.php | 2012-04-13 05:53:13 | 高危文件*****************
/home/gametea/gamecms/library/application.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/form.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/form.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/mysql.class.php | 2012-04-19 10:24:27 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/mysql.class.php | 2012-04-19 10:24:27 | 高危文件*****************
/home/gametea/gamecms/library/session_files.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/nusoap_base.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/nusoap_base.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/nusoap_base.class.php | 2012-04-18 08:25:51 | 文件可能被加密!!!
/home/gametea/gamecms/library/api_client.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/api_client.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/library/cache_file.class.php | 2012-04-18 08:25:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/library/cache_file.class.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/function/dir.func.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/gamecms/function/global.func.php | 2014-10-22 08:07:55 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/gamecms/function/global.func.php | 2014-10-22 08:07:55 | 高危文件*****************
/home/gametea/gamecms/function/global.func.php | 2014-10-22 08:07:55 | 文件可能被加密!!!
/home/gametea/gamecms/function/mail.func.php | 2012-04-18 08:25:51 | 高危文件*****************
/home/gametea/Public/Js/editor/php/upload.php | 2010-08-17 08:04:20 | 高危文件*****************
/home/gametea/hps/hps_oauth.php | 2014-09-01 08:50:43 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/hps/hps_oauth.php | 2014-09-01 08:50:43 | 高危文件*****************
/home/gametea/ginfo.php | 2008-10-28 06:13:04 | 高危文件*****************
/home/gametea/api/icp.php | 2012-04-18 08:24:21 | 高危文件*****************
/home/gametea/api/checkcode.php | 2012-04-18 08:24:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/srvcenter/common.function.php | 2013-08-19 10:24:05 | 高危文件*****************
/home/gametea/srvcenter/common.function.php | 2013-08-19 10:24:05 | 文件可能被加密!!!
/home/gametea/srvcenter/autologinlobby.php | 2013-06-07 10:14:12 | 文件可能被加密!!!
/home/gametea/srvcenter/sdo2gtregdo.php | 2014-09-28 07:21:22 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/srvcenter/reglog/view.php | 2013-12-20 15:59:45 | 高危文件*****************
/home/gametea/srvcenter/reglog/view.php | 2013-12-20 15:59:45 | 文件可能被加密!!!
/home/gametea/srvcenter/sdo2gt_reg.php | 2013-09-02 06:24:37 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/srvcenter/Codeauth.php | 2011-11-15 02:10:28 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/srvcenter/Codeauth.php | 2011-11-15 02:10:28 | 高危文件*****************
/home/gametea/module/subsite/admin_site.php | 2012-04-18 08:23:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/admin_site.php | 2012-04-18 08:23:21 | 高危文件*****************
/home/gametea/module/subsite/model/content_model.class.php | 2012-04-19 06:59:59 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/model/content_model.class.php | 2012-04-19 06:59:59 | 高危文件*****************
/home/gametea/module/subsite/admin_notic.php | 2012-04-18 08:23:21 | 高危文件*****************
/home/gametea/module/subsite/admin_robot_sr.php | 2012-04-18 08:23:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/admin_robot_sr.php | 2012-04-18 08:23:21 | 高危文件*****************
/home/gametea/module/subsite/ApiClient.php | 2012-04-18 08:23:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/admin_initinfo.php | 2012-04-18 08:23:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/admin_link.php | 2012-04-18 08:23:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/admin_category.php | 2012-04-19 04:16:57 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/content_add_news.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/captcha_tag_add.tpl.php | 2012-04-18 08:23:19 | 高危文件*****************
/home/gametea/module/subsite/templates/init_content_add_faq.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/uidservice_list.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/init_content_edit_faq.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/init_category_edit.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/content_list_news.tpl.php | 2012-07-13 07:57:16 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/init_content_list_news.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/captcha_set.tpl.php | 2012-04-18 08:23:19 | 高危文件*****************
/home/gametea/module/subsite/templates/category_edit.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/content_edit_news.tpl.php | 2013-08-01 04:24:04 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/captcha_tag.tpl.php | 2012-04-18 08:23:19 | 高危文件*****************
/home/gametea/module/subsite/templates/site_setting.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/init_category_add.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/link.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/guaranteeing.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/init_content_add_news.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/captcha_tag_edit.tpl.php | 2012-04-18 08:23:19 | 高危文件*****************
/home/gametea/module/subsite/templates/content_edit_faq.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/init_content_edit_news.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/labbydown.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/category_add.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/templates/content_add_faq.tpl.php | 2012-04-18 08:23:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/admin_captcha.php | 2012-04-18 08:23:21 | 高危文件*****************
/home/gametea/module/subsite/lang/zh-cn/default.lang.php | 2012-04-18 08:23:16 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/config.php | 2012-04-18 08:23:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/include/soapclienttimeout.class.php | 2012-04-18 08:23:17 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/include/subsite_tag.class.php | 2013-12-16 02:03:55 | 高危文件*****************
/home/gametea/module/subsite/include/site_api.class.php | 2012-04-18 08:23:17 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/subsite/include/initinfo_api.class.php | 2012-04-18 08:23:17 | 高危文件*****************
/home/gametea/module/subsite/include/doadmin_api.class.php | 2012-04-18 08:23:17 | 高危文件*****************
/home/gametea/module/act/admin_actives.php | 2012-04-18 08:22:49 | 高危文件*****************
/home/gametea/module/act/admin_rule.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/admin_rule.php | 2012-04-18 08:22:48 | 文件可能被加密!!!
/home/gametea/module/act/admin_card_manage.php | 2012-04-18 08:22:48 | 高危文件*****************
/home/gametea/module/act/admin_template.php | 2012-04-18 08:22:49 | 文件可能被加密!!!
/home/gametea/module/act/templates/award_control.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/log_playerrank.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/log_overviewrank.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/log_overviewrank.tpl.php | 2012-04-18 08:22:48 | 高危文件*****************
/home/gametea/module/act/templates/rule_add.tpl.php | 2012-04-18 08:22:48 | 文件可能被加密!!!
/home/gametea/module/act/templates/actives_edit.tpl.php | 2012-04-18 08:22:48 | 高危文件*****************
/home/gametea/module/act/templates/andrule_add.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/andrule_add.tpl.php | 2012-04-18 08:22:48 | 高危文件*****************
/home/gametea/module/act/templates/log_overview.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/card_list.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/template_config_rank.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/template_awardimg.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/template_config_lottery.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/template_config_lottery.tpl.php | 2012-04-18 08:22:48 | 文件可能被加密!!!
/home/gametea/module/act/templates/cardtype_list.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/award_add.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/log_player.tpl.php | 2012-04-18 08:22:48 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/act/templates/rule_list.tpl.php | 2012-04-18 08:22:48 | 文件可能被加密!!!
/home/gametea/module/act/exitshow.php | 2012-04-18 08:22:48 | 高危文件*****************
/home/gametea/module/act/include/creat_lua.class.php | 2012-04-18 08:22:47 | 高危文件*****************
/home/gametea/module/act/include/creat_lua.class.php | 2012-04-18 08:22:47 | 文件可能被加密!!!
/home/gametea/module/act/include/rule_ticked.class.php | 2012-04-18 08:22:47 | 文件可能被加密!!!
/home/gametea/module/speaker/speaker.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/speaker/speaker_bk.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/speaker/speaker.bk.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/a/index.php | 2013-07-30 09:04:08 | 高危文件*****************
/home/gametea/module/ads/admin_batch.php | 2012-04-18 08:22:51 | 高危文件*****************
/home/gametea/module/ads/admin_group.php | 2012-04-18 08:22:51 | 高危文件*****************
/home/gametea/module/ads/templates/position_edit.tpl.php | 2012-04-18 08:22:50 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ads/templates/platform_add.tpl.php | 2012-04-18 08:22:50 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ads/templates/position_add.tpl.php | 2012-04-18 08:22:50 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ads/templates/ads_add.tpl.php | 2012-04-18 08:22:50 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ads/templates/ads_edit.tpl.php | 2012-04-18 08:22:50 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ads/templates/batch_edit.tpl.php | 2012-04-18 08:22:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ads/templates/batch_add.tpl.php | 2012-04-18 08:22:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ads/templates/tabs_edit.tpl.php | 2012-04-18 08:22:50 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ads/templates/tabs_add.tpl.php | 2012-04-18 08:22:50 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ads/templates/platform_edit.tpl.php | 2012-04-18 08:22:51 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/charge/netpay/yeepay_req.php | 2012-04-18 08:22:26 | 高危文件*****************
/home/gametea/module/charge/netpay/yeepay_req.bf.php | 2012-04-18 08:22:26 | 高危文件*****************
/home/gametea/module/charge/netpay/yeepay_callback.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/netpay/card.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/netpay/newsnda_sendorder.php | 2012-04-18 08:22:26 | 高危文件*****************
/home/gametea/module/charge/netpay/yeepay_req_snda.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/netpay/phone_send.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/netpay/bank_receive.bf.php | 2012-04-18 08:22:26 | 高危文件*****************
/home/gametea/module/charge/netpay/snda_notify.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/netpay/phone_receive.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/netpay/card.bf.php | 2012-04-18 08:22:26 | 高危文件*****************
/home/gametea/module/charge/netpay/snda_sendorder.php | 2012-04-18 08:22:26 | 高危文件*****************
/home/gametea/module/charge/netpay/bank_send.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/netpay/httpclient.class.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/netpay/bank_receive.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/netpay/bank_receive.php | 2012-04-18 08:22:27 | 文件可能被加密!!!
/home/gametea/module/charge/netpay/snda_postback.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/index.php | 2012-04-18 08:22:28 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/charge/index.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/charge/alipay/return_url.php | 2012-04-18 08:22:25 | 高危文件*****************
/home/gametea/module/charge/alipay/alipayto.php | 2012-04-18 08:22:25 | 高危文件*****************
/home/gametea/module/charge/alipay/alipay_send.php | 2012-04-18 08:22:25 | 高危文件*****************
/home/gametea/module/charge/alipay/alipay_config.php | 2012-04-18 08:22:25 | 高危文件*****************
/home/gametea/module/charge/alipay/class/alipay_notify.php | 2012-04-18 08:22:22 | 高危文件*****************
/home/gametea/module/charge/alipay/class/alipay_function.php | 2012-04-18 08:22:22 | 高危文件*****************
/home/gametea/module/charge/alipay/notify_url.php | 2012-04-18 08:22:25 | 高危文件*****************
/home/gametea/module/charge/alipay/notify_url.bf.php | 2012-04-18 08:22:25 | 高危文件*****************
/home/gametea/module/charge/include/lib_base.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/include/cls_session.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/charge/include/soapclienttimeout.class.php | 2012-04-18 08:22:28 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/charge/include/cls_db.php | 2012-04-18 08:22:28 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/charge/include/cls_db.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/charge/include/lib_common.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/charge/include/lib_common.php | 2012-04-18 08:22:28 | 文件可能被加密!!!
/home/gametea/module/charge/include/cls_soapclient_timeout.php | 2012-04-18 08:22:28 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/charge/include/open-flash-chart.php | 2012-04-18 08:22:27 | 高危文件*****************
/home/gametea/module/charge/include/init.php | 2012-04-18 08:22:28 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/charge/include/init.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/charge/include/class.phpmailer.php | 2012-04-18 08:22:28 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/charge/include/class.phpmailer.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/charge/include/class.smtp.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/charge/include/cls_image.php | 2012-04-18 08:22:28 | 高危文件*****************
/home/gametea/module/game/admin_game.php | 2012-04-18 08:23:04 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/game/MY_index.php | 2012-01-14 07:33:36 | 高危文件*****************
/home/gametea/module/game/index__.php | 2012-04-18 08:23:04 | 高危文件*****************
/home/gametea/module/game/index.php | 2014-08-25 08:29:25 | 高危文件*****************
/home/gametea/module/game/MY_admin_game.php | 2012-01-14 07:34:15 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/game/templates/game_add.tpl.php | 2012-04-18 08:23:04 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/game/include/game_tag.class.php | 2014-08-14 10:58:18 | 高危文件*****************
/home/gametea/module/match/index.php | 2012-04-18 08:22:29 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/match/templates/match_add.tpl.php | 2012-04-18 08:22:29 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/match/templates/match_list.tpl.php | 2012-04-18 08:22:29 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/admin_svrconfig.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/rule_index.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/admin_game.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/admin_mail.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/svrconfig_index.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/admin_svrgroup.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/room_index.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/game_show.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/admin_room.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/templates/urladress_add.tpl.php | 2012-04-18 08:23:15 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/svrconfig_list.tpl.php | 2012-04-18 08:23:14 | 高危文件*****************
/home/gametea/module/optool/templates/svrconfig_edit.tpl.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/templates/svrconfig_edit_bean.tpl.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/optool/templates/svrgroup_edit_ext.tpl.php | 2012-04-18 08:23:15 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/svrgroup_add_ext.tpl.php | 2012-04-18 08:23:15 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/server_add_ext.tpl.php | 2012-04-18 08:23:14 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/urladress_list.tpl.php | 2012-04-18 08:23:14 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/server_list.tpl.php | 2012-04-18 08:23:14 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/svrgroup_list.tpl.php | 2012-04-18 08:23:15 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/list_server.tpl.php | 2012-04-18 08:23:14 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/svr_list.tpl.php | 2011-06-23 08:48:11 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/svr_list.tpl.php | 2011-06-23 08:48:11 | 高危文件*****************
/home/gametea/module/optool/templates/room_list.tpl.php | 2012-04-18 08:23:15 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/svr_add.tpl.php | 2011-06-23 08:48:11 | 高危文件*****************
/home/gametea/module/optool/templates/svrconfig_add_bean.tpl.php | 2012-04-18 08:23:14 | 高危文件*****************
/home/gametea/module/optool/templates/server_add.tpl.php | 2012-04-18 08:23:15 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/rule_list.tpl.php | 2012-04-18 08:23:15 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/optool/templates/svrconfig_add.tpl.php | 2012-04-18 08:23:15 | 高危文件*****************
/home/gametea/module/admin/model/dbmodel_model.class.php | 2012-04-18 08:22:08 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/model/dbmodel_model.class.php | 2012-04-18 08:22:08 | 高危文件*****************
/home/gametea/module/admin/admin_manage.php | 2012-04-18 08:22:21 | 高危文件*****************
/home/gametea/module/admin/index.php | 2012-08-01 07:06:45 | 高危文件*****************
/home/gametea/module/admin/dbmodel.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/admin_gm.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/admin_gm.php | 2012-04-18 08:22:21 | 高危文件*****************
/home/gametea/module/admin/templates/role_priv.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/dbmodel_field_manage.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/dbmodel_field_add.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/index.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/header.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/login.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/yjheader.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/role_list.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/showmessage.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/admin_list.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/admin_list.tpl.php | 2012-04-18 08:22:21 | 高危文件*****************
/home/gametea/module/admin/templates/admin_edit.tpl.php | 2012-04-18 08:22:21 | 高危文件*****************
/home/gametea/module/admin/templates/user_checked.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/templates/dbmodel_field_edit.tpl.php | 2012-04-18 08:22:21 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/lang/zh-cn/menu.lang.php | 2012-04-18 08:22:09 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/lang/zh-cn/default.lang.php | 2012-04-18 08:22:08 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/include/admin.class.php | 2012-04-18 08:22:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/include/cache_api.class.php | 2012-04-18 08:22:19 | 高危文件*****************
/home/gametea/module/admin/include/fields/edit.sql.php | 2012-04-18 08:22:19 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/include/fields/pages/form.inc.php | 2012-04-18 08:22:15 | 高危文件*****************
/home/gametea/module/admin/include/fields/textarea/field_edit.inc.php | 2012-04-18 08:22:18 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/include/fields/editor/output.inc.php | 2012-04-18 08:22:11 | 高危文件*****************
/home/gametea/module/admin/include/fields/editor/output.inc.php | 2012-04-18 08:22:11 | 文件可能被加密!!!
/home/gametea/module/admin/include/fields/title/form.inc.php | 2012-04-18 08:22:09 | 高危文件*****************
/home/gametea/module/admin/include/fields/box/form.inc.php | 2012-04-18 08:22:12 | 高危文件*****************
/home/gametea/module/admin/include/fields/box/output.inc.php | 2012-04-18 08:22:12 | 高危文件*****************
/home/gametea/module/admin/include/fields/keyword/output.inc.php | 2012-04-18 08:22:10 | 高危文件*****************
/home/gametea/module/admin/include/fields/omnipotent/field_edit.inc.php | 2012-04-18 08:22:13 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/include/fields/downfiles/output.inc.php | 2012-04-18 08:22:13 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/include/fields/text/field_edit.inc.php | 2012-04-18 08:22:10 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/include/fields/groupid/output.inc.php | 2012-04-18 08:22:17 | 高危文件*****************
/home/gametea/module/admin/include/fields/downfile/form.inc.php | 2012-04-18 08:22:16 | 高危文件*****************
/home/gametea/module/admin/include/fields/downfile/output.inc.php | 2012-04-18 08:22:16 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/include/fields/downfile/output.inc.php | 2012-04-18 08:22:16 | 高危文件*****************
/home/gametea/module/admin/include/fields/copyfrom/form.inc.php | 2012-04-18 08:22:14 | 高危文件*****************
/home/gametea/module/admin/include/fields/copyfrom/output.inc.php | 2012-04-18 08:22:14 | 高危文件*****************
/home/gametea/module/admin/include/fields/typeid/form.inc.php | 2012-04-18 08:22:15 | 高危文件*****************
/home/gametea/module/admin/include/field_api.class.php | 2012-04-19 07:04:40 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/admin/include/field_api.class.php | 2012-04-19 07:04:40 | 高危文件*****************
/home/gametea/module/ipad/index.php | 2012-04-18 08:23:16 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ipad/index.php | 2012-04-18 08:23:16 | 高危文件*****************
/home/gametea/module/ipad/index.php | 2012-04-18 08:23:16 | 文件可能被加密!!!
/home/gametea/module/ipad/templates/prop_add.tpl.php | 2012-04-18 08:23:16 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/ipad/include/ApiClient.class.php | 2012-04-18 08:23:16 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/member/index_bak.php | 2012-06-20 07:59:15 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/member/index_bak.php | 2012-06-20 07:59:15 | 高危文件*****************
/home/gametea/module/member/index_bak.php | 2012-06-20 07:59:15 | 文件可能被加密!!!
/home/gametea/module/member/gtlogin.php | 2013-10-17 01:33:12 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/member/index.php | 2014-11-12 06:11:57 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/member/index.php | 2014-11-12 06:11:57 | 高危文件*****************
/home/gametea/module/member/index.php | 2014-11-12 06:11:57 | 文件可能被加密!!!
/home/gametea/module/member/templates/buy_prop.tpl.php | 2012-04-18 08:22:57 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/member/templates/use_prop.tpl.php | 2012-04-18 08:22:57 | 执行PHP函数的危险文件!!!!!!!!!!!!!!!!!!!!!!
/home/gametea/module/member/templates/gt_p

修复方案：

你们更专业

祝盛大越来越火红。越来越强大！
赏个礼物呗。

版权声明：转载请注明来源 路人甲@乌云

漏洞回应

厂商回应：

危害等级：低

漏洞Rank：1

确认时间：2014-12-01 13:38

厂商回复：

十天已过。

最新状态：

2014-12-01：补充一点： 请不要在入侵过程中，进行恶意的数据库操作、挂链、钓鱼等操作。 适可而止的检测、报告漏洞，我们会很乐意的给分的。