1.读取metabase.xml/web.xml /password.properities敏感文件,得知www路径,coldfusion路径,coldfusion后台加密密码 2.本地包含coldfusion日志,写cfm一句话,得到WEBSHELL https://www.webshell.cc/index.cfm?action=../../../../../../../../../../CFu...

- 阅读全文 -