科讯 6.x~8.x getshell 0day

简要描述： 未对提交参数判断，导致可以写任意文件到服务器上... 详细说明： Wap/Plus/PhotoVote.asp 14 - 23 Dim KS:Set KS=New PublicCls Dim ID:ID = ReplaceKS.S"ID"," ","" Dim ChannelID:ChannelID=KS.G"ChannelID" If ChannelID="" Then ChannelID=2 If KS.G"LocalFileName""" And KS.G"RemoteFileUrl""" Then If...