A system vulnerability in heihu. getshell can control official website advertisements.

A system vulnerability in heihu. getshell can control official website advertisements.

RT

Main Site:
 

http://www.hihuu.com/

 

 

Http: // 120.55.138.90/

Weak Password

Lifang: 123456

High Permissions
 

 

 

There are multiple upload injections in the background

Uploading is not filtered out.

Directly upload jsp files

Http: // 120.55.138.90/file/2015-12-18/e97e3d46eba84a0e9425342e5b1855a0. jsp
 

After blocking the ip address of the kitchen knife, the kitchen knife cannot be taken.

 

 

 

 

Solution:

Weak Password background upload injection Filtering