global.php is included by all the files of 4images,so it can be exploited through many files
/index.php?l=../../../../../../etc/passwd%00
in real world,we can register a user and upload a php file named like xxx.jpg
then we can upload this jpg file to the server and included it
共 1 兑换
京公网安备 11010502034610号
暂无评论