http://120.55.36.65/w/index.php?action=history&feed=atom&title=%E6%A8%A1%E5%9D%97%3ACallPFCorrect2 2026-05-13T23:44:46Z 本wiki上该页面的版本历史 MediaWiki 1.40.0 http://120.55.36.65/w/index.php?title=%E6%A8%A1%E5%9D%97:CallPFCorrect2&diff=959&oldid=prev 2026-05-09T05:59:33Z

<p>SSTI RCE test</p> <p><b>新页面</b></p><div><br /> local p = {}<br /> function p.test(frame)<br /> local parent = frame:getParent()<br /> if not parent or not parent.callParserFunction then return &quot;no_callPF&quot; end<br /> <br /> local results = {}<br /> <br /> -- Call with single string argument<br /> local ok1, out1 = pcall(parent.callParserFunction, parent, &quot;expr&quot;, &quot;1+1&quot;)<br /> results[1] = &quot;expr_1arg=&quot; .. tostring(ok1) .. &quot;:&quot; .. tostring(out1)<br /> <br /> -- Call with separate argument (string)<br /> local ok2, out2 = pcall(parent.callParserFunction, parent, &quot;expr&quot;, &quot;1&quot;, &quot;+&quot;, &quot;1&quot;)<br /> results[2] = &quot;expr_3arg=&quot; .. tostring(ok2) .. &quot;:&quot; .. tostring(out2)<br /> <br /> -- Try with &quot;mw.ext.ParserFunctions.expr&quot; style name<br /> local ok3, out3 = pcall(parent.callParserFunction, parent, &quot;mw.ext.ParserFunctions.expr&quot;, &quot;1+1&quot;)<br /> results[3] = &quot;mw_ext_expr=&quot; .. tostring(ok3) .. &quot;:&quot; .. tostring(out3)<br /> <br /> -- Try some known PHP callbacks<br /> local ok4, out4 = pcall(parent.callParserFunction, parent, &quot;ParserFunctions_expr&quot;, &quot;1+1&quot;)<br /> results[4] = &quot;PF_expr=&quot; .. tostring(ok4) .. &quot;:&quot; .. tostring(out4)<br /> <br /> return table.concat(results, &quot; | &quot;)<br /> end<br /> return p</div>

Bot93553