ucserver admin.php,Discuz UC_Server 本地文件包含漏洞（有条件限制）

function onping() {

$ip = getgpc('ip');

$url = getgpc('url');

$appid = intval(getgpc('appid'));

$app = $_ENV['app']->get_app_by_appid($appid);

$status = '';

if($app['extra']['apppath'] && @include $app['extra']['apppath'].'./api/'.$app['apifilename']) {

$uc_note = new uc_note();

$status = $uc_note->test($note['getdata'], $note['postdata']);

} else {

$this->load('note');

$url = $_ENV['note']->get_url_code('test', '', $appid);

$status = $_ENV['app']->test_api($url, $ip);

}

if($status == '1') {

echo 'document.getElementById(\'status_'.$appid.'\').innerHTML = "'.$this->lang['app_connent_ok'].'";testlink();';

} else {

echo 'document.getElementById(\'status_'.$appid.'\').innerHTML = "'.$this->lang['app_connent_false'].'";testlink();';

}

}