Discuz7.2 导入插件数据可以生成一句话木马，直接getshell。
姿势：版主的“管理中心” => “插件” => “导入” => “上传文本” => “上传特定的XML文件” => “提交”
详情请看：siberia网易博客
http://easyboy1.blog.163.com/blog/static/264112038201710832338953/
http://easyboy1.blog.163.com/blog/static/264112038201710832338953/
http://easyboy1.blog.163.com/blog/static/264112038201710832338953/
