HongCMS 3.0 - Getshell by template/edit (Administrator Privilege)

[Rixo1043]

1.Login to the backstage as the administrator.

2.You need to edit the tpl file

3. Because the default safe mode configuration is off，so you can edit tpl file to getshell。
   The vulnerability code is as follows:

5. Add you webshell code in tpl file.

6. Then you can getshell in index file.

Repair suggestion:
1、Set safe mode true by default.