The WebBasicInfo. asp administrator privilege of the news publishing system is not verified.

Discoverer: sker (www.zerobox.org)

Affected Versions
Cutting-edge news publishing system 4.7ACC
Other versions have not been tested

Vulnerability description
The cutting-edge news publishing system is a CMS system that combines ASP programs with ACC and MYSQL.
Vulnerability path: admin/WebBasicInfo. asp
The programmer did not write the Administrator permission verification code on the page. He can directly enter the code to bypass the website background.

Vulnerability Exploitation
Enter WebBasicInfo. asp to modify the website name, website keyword, website introduction, and bottom copyright information.
You can disable the announcement, comment, and friendship connection function.

Solution
Wait for the official patch or compile your own administrator permission Verification Code