韩国HOMPYNET CMS漏洞

admin

上传漏洞  :

http://www.xxx.com/admin/image_a ... p;iname=&iform=

. O( T$ f8 U% K+ H2 thttp://www.xxx.com/admin/image_a ... p;iname=&iform=
: E8 Z4 B- F% Z$ C6 u7 d
( W- D2 K% V: H5 J3 _' b上传后路径：

- o  ~% E( N% ^; l) s; z2 Ehttp://www.xxx.com/bis_web_page/images/shell.php.en

% x* n% c; h- N, v编辑器：

7 J: B. z7 T6 Dhttp://www.xxx.com/admin/editor/SWE.php

5 f, L- Y! q% r; Xhttp://www.xxx.com/program/editor/SWE.php
$ k7 R: P* I' G
& G8 S% H2 w! P0 {数据配置文件路径：
+ F  L+ {3 z  [. _* Z
- N, }" [8 a" K" ]5 [http://www.xxx.com/m_config/DATA/g_setting.php
0 D% n  ]5 c2 L) `. V, }
此程序通用后台账号 ：gamsiw  php99
2 j4 T# F2 r9 p' u% V
​
  e0 x- [! i, w2 \. B
! |' ~8 j& m0 A" Y2 {3 e