我正在我的计算机上运行bWAPP v2.2 SSI注入(http://localhost/bWAPP/ssii.php - 或者您可以在youtube https://www.youtube.com/watch?v=kyw3e6UKN-w上观看某人的视频)。在页面上有一个包含两个字段(名字和姓氏)的表单。当我用<!--#exec cmd="dir" -->
填写姓氏时,我收到以下错误
[an error occurred while processing this directive]
但<!--#echo var="DOCUMENT_URI" -->
之类的echo命令正在运行。我在Windows 10上使用Apache / 2.4.25和PHP 5.6.30。这是Apache错误日志
[Wed May 03 14:58:06.517706 2017] [win32:error] [pid 16960:tid 1864] (OS 2)The system cannot find the file specified. : [client ::1:63531] AH02100: Failed to open cgi file dir for testing, referer: http://localhost/bWAPP/ssii.php
[Wed May 03 14:58:06.518706 2017] [cgi:error] [pid 16960:tid 1864] (OS 2)The system cannot find the file specified. : [client ::1:63531] AH01226: don't know how to spawn cmd child process: C:/xampp/htdocs/bWAPP/ssii.shtml, referer: http://localhost/bWAPP/ssii.php
[Wed May 03 14:58:06.518706 2017] [cgi:error] [pid 16960:tid 1864] [client ::1:63531] AH01229: execution failure for parameter "cmd" to tag exec in file C:/xampp/htdocs/bWAPP/ssii.shtml, referer: http://localhost/bWAPP/ssii.php
如何使SSI执行工作?
答案 0 :(得分:1)
我也遇到同样的问题,但是,我找不到该错误的任何解决方案。相反,我在<!--#include virtual="../" -->
处找到了另一个替代命令来替换<!--#exec cmd="dir" -->
。