SOOP Portal 2.0 IIS resolution Upload Vulnerability

The SOOP Portal Member registration page contains security questions, which can be uploaded and executed using pseudo-creation shell.asp;.jpg.
 

Google: "soops Portal 2.0"

1. Register as a Website member; http://www.bkjia.com/member_form.asp? Do = 5 & mid = 4

2. log on to the member center;

3. Browse and upload;

4. Go to picture upload http://www.bkjia.com/assetman3.asp? Mode = 1 & ffilter = image

5. Select shell.asp;.jpg IIS Parsing Vulnerability shell

6. Check the shell path in Step 6.

7. Upload directory Example URL: http://www.bkjia.com/uploads/