Fanica ISite enterprise website construction system V1.1.9 upload Bypass

You can get ewebedit. In turn, you can get the SHELL.

At first, we only got a square card online background. You can modify the upload category. Unfortunately, there is protection. After the change, the system recovers.

Continue. Is a new web site background management software. Baidu is over. Almost no vulnerabilities have been submitted. Only when a file name is not strictly filtered, it has been updated on this server. The EWEB is selected in the debugging option. Www.2cto.com

Next. I found a page for calling EDIT.

 

The page framework is abnormal. The source file cannot obtain the EWEB path. I want to capture packets. Finally, the EWEB path is obtained.

In this way, you can use EWEBEDIT to get the SHELL.

 

Solution:

Awaiting official upgrade