Arbitrary File Upload on a satellite TV video transfer Sharing Platform

After the video is uploaded, the file is submitted, captured, modified, submitted, and directly returned to the file path. On the upload page, a kitchen knife is displayed to connect to the database and use it for SA. The SA user can execute system commands. disabled, but net1 can be used on this server for Intranet. Although the server line has been killed by the virus, it does not affect the continued penetration through the Intranet!
This is the end of the security test!Solution:Disable SA account filter upload. You are more professional than me! Rank for gift