韩国HOMPYNET CMS漏洞

admin

上传漏洞  :
: K: ~. u4 l3 r
0 Z5 v- I- b+ b  w1 vhttp://www.xxx.com/admin/image_a ... p;iname=&iform=
0 i  V+ ^7 R+ _  K+ G$ z
  ]9 p! v% O# `" zhttp://www.xxx.com/admin/image_a ... p;iname=&iform=
) ?( f( {& ~0 n; D8 i: \- @! u
" }2 `# p% p& k, L  e0 j上传后路径：

http://www.xxx.com/bis_web_page/images/shell.php.en
+ l( b6 S" `$ f: x) Y
# o- Z# D7 I( @# E编辑器：

( ]: z1 |* V: f4 o3 [3 l& B7 Jhttp://www.xxx.com/admin/editor/SWE.php
6 L- B& o7 D9 }6 a9 I( k; p4 ~# w
http://www.xxx.com/program/editor/SWE.php
, W0 X! B/ S5 o5 V8 j' l. j! ?
4 S; h2 B! ^" j- l% a7 `数据配置文件路径：
- d; s: R; n  G8 O
" b6 e7 C- Z& U$ U8 K- g6 ^http://www.xxx.com/m_config/DATA/g_setting.php

此程序通用后台账号 ：gamsiw  php99
* y! \, q  ~  q5 [' W0 {
​
6 `* g# H( p% j2 o