57oo movie online chicken rib Vulnerability

Baishen s blog

This program downloads a large volume on chinaz, which indicates that it integrates the advantages of Marx movies and other programs.
I wanted to give up, but I still went back to read the results and found a strange place. We know that

In the background of the Marx movie program, admin_ads.asp under admin, where an advertisement is entered, makes a session.

Verify but remove # include file = "check. asp" from this program.

An environment test is set up locally:

Http: // 127.0.0.1/admin/admin_ads.asp? Action = edit & a = homepage Head Advertisement JS & B = js/Index_Head.js

 

Home page:

127.0.0.1

 

In theory, there is also a cookie injection in gonggao. asp. Let's take a look.