SiteServer CMS program is not strict in uploading and filtering, so shel can be used.

One day with Night chat, accidentally found SiteServer CMS Upload Vulnerability, filtering not strict http://demo2.siteserver.cn today to test the main site of this demo Template
Previously, this set of programs also revealed that user names were not strictly filtered and used, and updated programs cannot be registered *. for users with a dot like asp, user uploads are also filtered out like * .asp;.jpg. If you try it, you find that * .asa}.doc is not filtered out and the file is directly executed through the IIS6.0 vulnerability, so shell came out .... First, you have registered a user, wooyun, to the user center to upload the page. OK. The upload is successful. Try again.

After the operation is successful, you can directly attach the kitchen knife ..Solution:No good solution. Just filter strictly.