用友软件开发管理平台IIS写权限导致可获取服务器webshell

### 简要描述： 见说明 ### 详细说明： http://ufsdp-borrow.ufsoft.com.cn/cmd.asp http://ufsdp-borrow.ufsoft.com.cn/1937cN.txt ### 漏洞证明： [<img src="https://images.seebug.org/upload/201307/0618262580eed159965a7d986155ea6f9997c1b0.png" alt="6.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201307/0618262580eed159965a7d986155ea6f9997c1b0.png) [<img src="https://images.seebug.org/upload/201307/061826155cc3acd346f564bb9091bdcff3c987c9.png" alt="5.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201307/061826155cc3acd346f564bb9091bdcff3c987c9.png) [<img src="https://images.seebug.org/upload/201307/06182606e651f4289aa9d2f7534b153b38194ea6.png" alt="4.png" width="600" onerror="javascript:errimg(this);">](https://images.seebug.org/upload/201307/06182606e651f4289aa9d2f7534b153b38194ea6.png)