中国联通WLAN某站目录遍历漏洞泄露多个管理平台登录口令（可远程控制大量夜店路由器）

<?php
 /**
  * Created by PhpStorm.
  * User: tru2dagame
  * Date: 15/2/11
  * Time: 下午6:49
  */
 date_default_timezone_set('PRC');
 set_time_limit(0);
 $config = array(
 /*
     array(
         'server' => "**.**.**.**:8443",
         'username' => "admin",
         'password' => "unicom3824",
         'version' => 'v3',
     ),
 
     array(
         'server' => "**.**.**.**:8443",
         'username' => "admin",
         'password' => "unicom3824",
         'version' => 'v4',
     ),
  */
  array(
         'server' => "**.**.**.**:8443",
         'username' => "linktechunicom",
         'password' => "unicom123",
         'version' => 'v4',
     ),
 
 );
 
 $db_config = array(
     'host' => '**.**.**.**',
  'user' => 'root',
  'pass' => '',
     'name' => 'unifi_status',
     'port' => '3306',
 );
 
 require_once(ROOT_PATH . './api/v1.1/unifi.class.php');
 require_once(ROOT_PATH . './api/v1.1/mysql.class.php');
 
 // $unifi = new UniFi($config);
 $mysql = UbntMysql::get_instance($db_config);
 
 
 /*
 
 CREATE TABLE IF NOT EXISTS `default` (
 `id` int(11) NOT NULL,
   `_id` varchar(24) NOT NULL,
   `ap_mac` varchar(17) NOT NULL,
   `assoc_time` int(10) unsigned NOT NULL,
   `bytes` int(10) unsigned NOT NULL,
   `channel` tinyint(3) unsigned NOT NULL,
   `disassoc_time` int(10) unsigned NOT NULL,
   `duration` int(10) unsigned NOT NULL,
   `hostname` varchar(32) NOT NULL,
   `ip` varchar(16) NOT NULL,
   `is_guest` tinyint(3) unsigned NOT NULL,
   `mac` varchar(17) NOT NULL,
   `name` varchar(32) NOT NULL,
   `radio` varchar(10) NOT NULL,
   `roam_count` int(10) unsigned NOT NULL,
   `rx_bytes` varchar(64) NOT NULL,
   `site_id` varchar(24) NOT NULL,
   `tx_bytes` varchar(64) NOT NULL,
   `user_id` varchar(24) NOT NULL
 ) ENGINE=MyISAM DEFAULT CHARSET=utf8;
 
 
 ALTER TABLE `default`
  ADD PRIMARY KEY (`id`), ADD KEY `assoc_time` (`assoc_time`), ADD KEY `mac` (`mac`);
 
 ALTER TABLE `default`
 MODIFY `id` int(11) NOT NULL AUTO_INCREMENT;
 
 */