Package vulnerabilities on a giant's website (weak passwords \ SQL Injection \ PMA access \ SVN leakage)

Package vulnerabilities on a giant's website (weak passwords \ SQL Injection \ PMA access \ SVN leakage)

Conscience vendors are rare (* accounts ^ Accounts *)

Http: // 222.73.243.217/weak password: xubin 123456

This background seems to be obsolete, and some functions cannot be used.

 

There is injection in the background:

222.73.243.217/syswork/carryon/carryonshow. php? Act = manage & carryonid = 35468

Carryonid Parameter
 

Svn leakage: http: // 222.73.243.assets //. svn/entries
 

 

Solution:

Modify weak passwords. Delete. svn