WebShell
A malicious script that executes system commands remotely via HTTP requests. Common forms include PHP, ASP, and JSP files. After an attacker uploads such a file to a server, it provides an interactive command-execution interface accessible through a browser, enabling remote control of the compromised server.
Timeline (last 90 days)
A WebShell is essentially a script that can remotely execute system commands via HTTP requests, commonly in the form of PHP, ASP, or JSP files.
A file upload function in the back-end combined with a weak password often constitutes a Critical-level vulnerability in the SRC rating system.
All Facts (2)
A WebShell is essentially a script that can remotely execute system commands via HTTP requests, commonly in the form of PHP, ASP, or JSP files.
50%UnverifiedA file upload function in the back-end combined with a weak password often constitutes a Critical-level vulnerability in the SRC rating system.
50%