51javacms background jsp File Upload Vulnerability and Arbitrary File Download Vulnerability on the official website and

The programmer's security awareness is too low, and the backend is allowed to upload jsp files.
Jsp files can be uploaded in multiple places in the background without any filtering. The decompiled source code still has many security problems.
 





Go to the background system System Management> www.2cto.com file attachment management to upload jsp files. The official website has no restrictions. Directly upload the shell and get a root.
 
 
Solution:

Although the ssh speed is not needed, can SQL be pieced together everywhere to ensure security? SPRING (mvc3) + mybatis +

The author sneaked into the night with the wind


Any files can be downloaded from the official website.
Http://www.51javacms.com/51javacms/PluginCtrl? Page = DownLoadFilePage & path =/download & name = .. /.. /.. /.. /.. /.. /.. /.. /.. /.. /.. /etc/shadow

 
 
Author: Ma Sange