后台添加账户没有验证权限，导致直接添加账户

http://www.hack1990.com /manageadmin/System/manage_admin.asp

http://www.hack1990.com /manageadmin/System/manage_admin_add.asp

 

其他信息：

http://www.hack1990.com /manageadmin/editor/admin/login.asp

sUsername = "xgnic"

sPassword = "xgnic1281"