Multiple security vulnerabilities in oocl websocket broadband storage, shell

Apply a sentence from someone: You can change the homepage.
1. First, open the website and check that the asp site, without him, still miss the first love Scan

Edit Editor, roar... You know

2. You don't have to look at the background database download in the edit editor.

Http://www.xxxxxx.com.cn/edit/db/ewebeditor.mdb

Wow... A bunch of garbled characters... Download it directly from thunder. Open the password

3. Wait for 5 at this time... The results are very painful.

Nima 20080808, wood, Olympics, wood

 

4. Then, log on to the editor's background to manage and see that you can directly upload the asa file. What else do you want? Decisive upload

5. directly upload the asa file and insert a sentence

6. Don't talk about it later.

Shell deleted...

There is a probe here. I don't know who uploaded the probe and exposed the path.

Http://www.ocnsh.com.cn/admin/aspcheck.asp
 

Solution:

You know better than me