eweb上传漏洞修补

在upload.asp页面找到' 任何情况下都不允许上传asp脚本文件

修改为

 

' 任何情况下都不允许上传asp脚本文件
 sAllowExt = Replace(UCase(sAllowExt), "ASP", "")
 '-----------------------
 ' 任何情况下都不允许上传asp,cer,asa,cdx,htr脚本文件 
    sAllowExt = UCase(sAllowExt)
 'sAllowExt = Replace(UCase(sAllowExt), "ASP", "")
 Do While InStr(sAllowExt, "ASP") Or InStr(sAllowExt, "CER") Or InStr(sAllowExt, "ASA") Or InStr(sAllowExt, "CDX") Or InStr(sAllowExt, "HTR")
   sAllowExt = Replace(sAllowExt, "ASP", "")
   sAllowExt = Replace(sAllowExt, "CER", "")
   sAllowExt = Replace(sAllowExt, "ASA", "")
   sAllowExt = Replace(sAllowExt, "CDX", "")
   sAllowExt = Replace(sAllowExt, "HTR", "")
   sAllowExt = Replace(sAllowExt, "CGI", "")
   sAllowExt = Replace(sAllowExt, "ASPX", "")'
'   sAllowExt = Replace(sAllowExt, "ASP .JPG", "")
'   sAllowExt = Replace(sAllowExt, "CER .JPG", "")
'   sAllowExt = Replace(sAllowExt, "ASA .JPG", "")
'   sAllowExt = Replace(sAllowExt, "CDX .JPG", "")
'   sAllowExt = Replace(sAllowExt, "HTR .JPG", "")
'   sAllowExt = Replace(sAllowExt, "CGI .JPG", "")
'   sAllowExt = Replace(sAllowExt, "ASPX .JPG", "")  
 Loop
 '-----------------------