【发布时间】:2017-05-03 08:25:35
【问题描述】:
我正在我的计算机上运行 bWAPP v2.2 SSI 注入(http://localhost/bWAPP/ssii.php - 或者您可以在 youtube https://www.youtube.com/watch?v=kyw3e6UKN-w 上观看某人的视频)。在页面上有一个包含两个字段(名字和姓氏)的表单。当我用<!--#exec cmd="dir" --> 填写姓氏时,出现以下错误
[an error occurred while processing this directive]
但是像<!--#echo var="DOCUMENT_URI" --> 这样的回显命令正在工作。我在带有 Apache/2.4.25 和 PHP 5.6.30 的 Windows 10 上。这是 Apache 错误日志
[Wed May 03 14:58:06.517706 2017] [win32:error] [pid 16960:tid 1864] (OS 2)The system cannot find the file specified. : [client ::1:63531] AH02100: Failed to open cgi file dir for testing, referer: http://localhost/bWAPP/ssii.php
[Wed May 03 14:58:06.518706 2017] [cgi:error] [pid 16960:tid 1864] (OS 2)The system cannot find the file specified. : [client ::1:63531] AH01226: don't know how to spawn cmd child process: C:/xampp/htdocs/bWAPP/ssii.shtml, referer: http://localhost/bWAPP/ssii.php
[Wed May 03 14:58:06.518706 2017] [cgi:error] [pid 16960:tid 1864] [client ::1:63531] AH01229: execution failure for parameter "cmd" to tag exec in file C:/xampp/htdocs/bWAPP/ssii.shtml, referer: http://localhost/bWAPP/ssii.php
我应该怎么做才能让 SSI exec 工作?
【问题讨论】: