Vulnerabilities and fixes in the group email Statistics System v1.2

# Team: makebugs # Author: Fate

'Fenlei. asp
IF Request. QueryString ("Action") = "del" Then
ID = Request. QueryString ("ID ")
IF Countss ("tui", "Fenlei", ID) <> 0 then
& Apos;
IF Request. QueryString ("Action") = "Add" Then
Tname = Request. Form ("Typename ")
Set Rs = Server. CreateObject ("adodb. Recordset ")
SQL = "Select * From Fenlei Order by id Desc"
Rs. Open SQL, Conn, 1, 3
Rs. Addnew
Rs ("Typename") = Tname
& Apos;
Set Rs = Server. CreateObject ("adodb. Recordset ")
SQL = "Select * From Fenlei Order by id Desc"
Rs. Open SQL, Conn, 1, 1
& Apos;
%>

Directly write data to the database without filtering.

Usage:

Insert: the maximum number of rows is larger than the maximum number of rows.>

Connection: http: // 127.0.0.1/### tongbaner. asa
'Default installation file:
'Install. asp

Http://t.qq.com/MakeBug

Fixed: malicious input filtering