Independent Development of website source code vulnerability and repair in the mail Transmitting Network

Editor vulnerability Default background ubbcode/admin_login.asp
Database ubbcode/db/ewebeditor. mdb
Default Account Password yzm 111111
Webshell Method
Log on to the background and click "style management"-select the new style to write only the style names: scriptkiddies
Casual write path mode: Select absolute path image type: gif | jpg | jpeg | bmp asp | asa | aaspsp | cer | cdx
The image type is, for example, the ASP Trojan format to be uploaded.
Upload path :/
Image restrictions: write 1000 without any help. Do not write the content uploaded by our asp Trojan.
Then we can click Submit to see that the style is successfully added! Click "-return to style management", find the name of the style you just added, press "add toolbar", Press "-" To Set ", select" insert image ", and press"-"to save the settings.
Then, enter ubbcode/Upload. asp in the address bar of the webpage? Action = save & type = & style = scriptkiddies
On the ASP Trojan, press enter to wait for the path

Www.2cto.com:
Submitted to the official website. Awaiting upgrade