Kingtop content management software injection vulnerability and repair

Vulnerability Author: akast
Brief description of vulnerability details:

Vulnerability file:/news/index. aspx

Vulnerability variable: MenuID

Software type: commercial software

Vulnerability Description: You can use this injection vulnerability to obtain the website administrator privilege, so that you can log on to the website administrator's webmanage/Login. aspx and obtain the webshell privilege.

Vulnerability scope: websites using the graphic Kingtop content management software may be at risk !!!
Proof of vulnerability:

Solution: patch download: no official patch is released.
Temporary repair solution for www.2cto.com: filter the MenuID variable input on the index. aspx page