The moving web 8. x latest 0day-vulnerability warning-the black bar safety net

2009-09-29T00:00:00
ID MYHACK58:62200924851
Type myhack58
Reporter 佚名
Modified 2009-09-29T00:00:00

Description

Use the or IIS the filename parsing vulnerability.

Affected version: Powered By Dvbbs Version 8.2.0 Powered By Dvbbs Version 8.1.0 Powered By Dvbbs Version 8.0.0

Registered users-my homepage-personal space management

userspace. asp? sid=0&act=modifyset

Then edit the CSS style-file management

bbs/Dv_plus/myspace/script/filemange. asp

Upload hacknote. asp;hacknote.jpg

Next know.

Hurry