vBulletin5远程代码执行漏洞分析

public function render($isParentTemplate = true, $isAjaxTemplateRender = false)

    {

        $this->register('user', $user, true);

        extract(self::$globalRegistered, EXTR_SKIP | EXTR_REFS);

     =》extract($this->registered, EXTR_OVERWRITE | EXTR_REFS);

        

        ...

        

        $templateCache = vB5_Template_Cache::instance();

     =》$templateCode = $templateCache->getTemplate($this->template);

        if($templateCache->isTemplateText())

        {

           =》@eval($templateCode);

        }