Mofei_new news management system kills 0-day

First: mofei_new news management system kill 0-day
Author: Feng Mo-Heartless
Time: 2010-6-10
Bytes ---------------------------------------------------------------------------------------

1. GOOGLE Keyword: inurl: mofei_list.asp? Id = *

2. You can directly drop ah d for injection [you need to add a field: usename]
3. Guess

4. From: mofei_login.asp login background address

The backend can capture packets and upload Trojans

Note that there is no Trojan address after the upload is successful.

For example, you can modify the upload path to/previusfile/1.asp.

We can find www.xxx.com/previusfile/1.asp if the trojan address is not displayed after the upload is successful.