Chinese Xinhua home source code Trojan writing vulnerability and repair

 

By Mr. DzY

From www.0855. TV

 

China Xinhua home source code, can be used for computers, machinery, decoration and other enterprise websites.

 

Source code download: http://www.mycodes.net/25/4596.htm

 

If you are interested, you can check it out by yourself. There may be other problems. I don't know much about it either.

 

Management Background login address/100 or/manage/login. asp

Default logon username admin password admin

Default database/xinhua. asp

 

Exploitation:

 

Access the http://www.bkjia.com/message. asp to insert a sentence.

 

Kitchen Knife http://www.bkjia.com/database/xinhua. asp

 

Inurl: human. asp? Id = 12

 

Fix: filter/prevent database downloads.