ASPCMS message board injection can directly insert a single-sentence Trojan into the database (including repair solutions)

Aspcms is mainly an information publishing system, and the affected version is asp.
 
Vulnerability causes: improper information processing on the message board, resulting in code injection. One-sentence Trojan can be directly inserted into the database.
 
The default configuration of the database is asp. directory under/data. asp.
 
By using this method, the default database path can be changed at the end and can be left blank. Even if you cannot leave a message, it can be constructed. After testing, the last change is as follows:
Insert in the title of the message: adjust the number of messages in total.
 
In this way, a sentence is inserted into the database, and the password is
 
Solution:

1. Modify the default data path
2. Delete the message board without a message board
3. Modify the database format to mdb.
 
 
If the author likes