漏洞复现靶场writeup之三

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