韩国HOMPYNET CMS漏洞

admin

上传漏洞  :
1 s- i( @9 V0 E9 }! a- k8 z
' Y- g9 G* Q5 w- f6 Y( U! [& }; Vhttp://www.xxx.com/admin/image_a ... p;iname=&iform=

/ Z6 r% |9 e) c2 i) ahttp://www.xxx.com/admin/image_a ... p;iname=&iform=

, ]; C! q. k0 [- d; [0 y5 j上传后路径：
! f" R) A! ~& Z) D& X6 D( n
* k& [- Z  `# a& n0 [5 whttp://www.xxx.com/bis_web_page/images/shell.php.en
( t2 E$ `& e( }: |8 q
+ u" M# d% p8 ?3 _6 p7 ?0 m6 _# U编辑器：
: C4 P/ ]5 U9 @: W  y( [* \
# Y+ w0 ], ^* |6 M8 ]% w) N8 @http://www.xxx.com/admin/editor/SWE.php
; o2 K9 _, A: f* ?1 v; u. A
http://www.xxx.com/program/editor/SWE.php
/ `) K+ M# q5 c1 A9 V9 k6 A
. [' n. T! S6 B7 v6 g+ ^数据配置文件路径：
0 y+ f- A; d: K. S
http://www.xxx.com/m_config/DATA/g_setting.php
) ]$ P' S) g7 S
此程序通用后台账号 ：gamsiw  php99
8 }& y8 F: e" T2 _+ a1 o" R8 J
. u- @2 F$ z: h5 C​
- f0 B( q+ }3 q( ^5 ^* j! s3 H