Mlecms multi-language enterprise website management system v2.3 storage xss

Vulnerability: stored xss

Vulnerability file: links. php

The vulnerability is located at the website name and logo address at the application link. xss is displayed because the website name "webname" is obtained by post and is not filtered!

Instructions for use: xss uses webshell in the background

Shell in the background: Enter the URL "admin/template_update.php?" directly after the domain name? Dir = default & file = config. default. php "to modify the template! Then add a php statement to the template modification, and connect "/inc/templates/frontend/default/config. default. php" directly after the domain name!
 

PS: xss is much better than SQL, so it is rare to guess the table and pop-up table, directly in the X background! (* ^__ ^ *) Xi ......

Figure-1

Figure 2

Figure-3

Figure 4