【0day】EasyTalk 微博本地文件包含漏洞

漏洞文件在“wap/index.php”,关键代码如下：

<?php
error_reporting(7);
define('IN_ET', TRUE);
include('../include/etfunctions.func.php');
include('../include/db_mysql.class.php');
include('../config.inc.php');
$db = new dbstuff;
$db->connect($server,$db_username,$db_password,$db_name, $pconnect,true);
@mysql_query("set names utf8");
include('include/global.func.php')
$op=$_GET['op']?$_GET['op']:"index"; /*Get方式获取op值并没有过滤直接放入op by:sw0rder*/
$addtime=time();
$action=$_POST['action'];
$act=$_GET['act'];
$page=$_GET['page']?$_GET['page']:1;

/*往下看*/
if (!$user['user_id']) $head="EasyTalk微博客 随时随地";
else $head="欢迎您，".$user['nickname'];
if (!$user['user_id'] && $op=="index") $op="login";
include_once('a/'.$op.'.inc.php'); /*这里包含，需截断 by:sw0rder*/