Download Vulnerability and repair of qachi entertainment Database

: Http://down.admin5.com/asp/24277.html
 
Because the database does not prevent downloading, xx is caused. The administrator can change it -~ The change is automatically 6.6 easier. It seems that exp can be injected .. No test is successful ~
Just this system --~ Default database download, md5 decryption.
 
Exp:
 
1
Http://www.bkjia.com/database/Karqi_Com.mdb
Http://www.bkjia.com/admin/admin_index.asp
 
It's easy to use webshell. Let's look at baidu ..
 
Default identification code for background management: karqi.com
 
Solution:
 
 
Change the database path. Change conn. asp to the database path.
Modify the configuration. asp backend management authentication code to another one.

From http://www.h4x0er.com/ka-qi-yu-le-lou-dong.html