The cms background filter in the sunny navigation system is lax.

Test URL

Http://www.bkjia.comDmin/log/dispcont.P

Admin/log/dispcont. asp


Check the logon records of the Administrator due to lax filtering.

Although the success is encrypted in iis5, a large part of the data can be cracked.

You must find the Administrator directory before you can view it.

Keywords: Map comments and feedback on our website forum free record traditional display

The webshell method is simple.

In this case, you must use IE to get the shell.

Struggling

Write/admin163.asp;.html and click Create and save automatically.

Click Save


Then find

Http://www.bkjia.com Dmin163.asp;.html

Password admin163