FengHua record 2.0 official version injection vulnerability and repair

/TeacherList. asp? Action = ViewDetail & ID = 3

SysAdm_Login.asp

Note: The default information of the FengHua record system is as follows:
Foreground verification will default
Username: fenghua
Password: txlbbs.126
The default value for background verification is
Username: kissinger
Password 61650018
The default database address is:
Databasefhs200m. asp
Database Password:
F2y0t0x3l

 

Fix: The injection holes are filtered out. When using the program, modify the default password and database address in time.