Netcms oday Upload Vulnerability and repair

First, my Baidu "NetCms website management system", and then found a website.
Then go in,/user/login. aspx, and click Register.
Click to post an article.
 

On the post page, click "select image"
 

 

Here, write down the directory name Userfiles/049357214223, which is the name of the Directory saved in your attachment.
Then, send an insite message to yourself in the information section of the website, and directly transmit the horse in the attachment.
 
 
 

Then, find the insite email in the inbox, open it, download the attachment, and record the name uploaded by our horse.

 

 

Get the new name of the Trojan: c58f7a4d96073cafc. asp
Then, the complete path of our horse is Userfiles/049357214223/c58f7a4d96073cafc. asp. in the address bar, press Enter.