Discuz!7.0-7.2后台settings.inc.php中写shell漏洞
漏洞详情: if$operation == 'uc' && iswriteable'./config.inc.php' && $isfounder $ucdbpassnew = $settingsnew'uc''dbpass' == '' ? UCDBPW : $settingsnew'uc''dbpass'; if$settingsnew'uc''connect' $ucdblink = @mysqlconnect$settingsnew'uc''dbhost', $settingsnew'uc''dbuser', $ucdbpassnew, 1; if!$ucdblink...