add index.php

0secmy · Apr 1, 2018 · 15f0d25 · 15f0d25
1 parent 7f8fe67
commit 15f0d25
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/httpd/CVE-2017-15715/index.php b/httpd/CVE-2017-15715/index.php
@@ -0,0 +1,9 @@
+<?php
+if(isset($_FILES['file'])) {
+    $name = basename($_POST['name']);
+    $ext = pathinfo($name,PATHINFO_EXTENSION);
+    if(in_array($ext, ['php', 'php3', 'php4', 'php5', 'phtml', 'pht'])) {
+        exit('bad file');
+    }
+    move_uploaded_file($_FILES['file']['tmp_name'], './' . $name);
+}