6CMS enterprise website management system (Chinese and English Traditional Chinese Version) SQL injection vulnerability and repair

Source: Internet
Author: User

Author: Monkey QQ: 812009485

I just got home from the holiday. I am idle and have nothing to do, and it's heavy snow. I don't want to go out and soak mm ..

Suddenly I saw an enterprise cms, So I downloaded the program.

G.cn Keyword: 6CMS enterprise Site Management System (Chinese and English Traditional Chinese Version)

Default Account Password: admin

Background: admin/

I don't know how the programmer got it. I can see that the admin directory of the program has an anti-injection SQL. asp

But the parent directory does not

Default Database: data/# sze7xiaohu. mdb

Seeion verification is also a bit messy. Remember that there is a file in the admin directory that can be directly accessed to publish a job (which file is specific). It seems that messages can be directly published.

Put it directly.

Back up the database directly in the background.

I feel that there is no practical value. It's boring. You should study it yourself.



Fixed: filtering and enhanced verification

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.