QVODCMS V4.0 相关

调用maxcms_upload.asp

maxcms_upload.asp：

'判断文件类型
if lcase(up_fileExt)="asp" and lcase(up_fileExt)="asa" and lcase(up_fileExt)="aspx" then
        CheckFileExt(up_fileExt)=false
end if
if CheckFileExt(up_fileExt)=false then
        response.write "

"
response.end
end if

很明显过滤了asp asa  aspx ....  so  you know how to use!    php  cer....

位于AdminFckeditoreditorqvodcms_editor_server下有FCK不过被改名了 也可用直接访问利用

有:

frmupload.html

frmresourcetype.html

frmresourceslist.html

frmfolders.html

frmcreatefolder.html

frmactualfolder.html

Data/##QVODCMS4.0.mdb

md5加密的

后台路径：admin/

用户名：qvodcms

密  码：qvodcms

认证码: qvodcms

but........

"安全提醒：你必须修改默认后台admin目录名称不然无法输入帐号密码进后台！"

so  你需要猜后台。

转自：http://www.90sec.org/viewthread.php?tid=2232&extra=page%3D1%26amp%3Borderby%3Ddateline%26amp%3Bfilter%3D2592000