simple-cms
simple-cms copied to clipboard
dcblogdev
Building a content management system from scratch
http://192.168.2.129/simple/admin/?delpage=8 I can delete any page when I send the url to administrator. I can also use the Short DomainNames to encode the url. 
http://192.168.2.129/simple/admin/ I can add page when admin click the html file. payload: ``` history.pushState('', '', '/') ``` 
http://192.168.2.129/simple/admin/login.php This url is used to log in admin. But I can access addpage.php without logging admin. And I can also add page. http://192.168.2.129/simple/admin/addpage.php 