0-day cookie injection and repair for Amanda enterprise website system

<% @ LANGUAGE = VBScript. Encode %>
<! -- # Include file = "Inc/SysProduct. asp" -->
<%
ShowSmallClassType = ShowSmallClassType_Article
Dim ID
ID = trim (request ("ID "))
If ID = "" then
Response. Redirect ("cg_Product.asp ")
End if

SQL = "select * from cg_Product where ID =" & ID &""
Set rs = Server. CreateObject ("ADODB. Recordset ")
Rs. open SQL, conn, 1, 3
If rs. bof and rs. eof then
Response. write "<SCRIPT language = JavaScript> alert (this success story cannot be found !); "
Response. write "javascript: history. go (-1) </SCRIPT>"
Else
Rs ("Hits") = rs ("Hits") + 1
Rs. update
%>

Only get post is filtered and cookie injection exists.
Amanda/cg_ProductShow.asp
Http://www.bkjia.com/jmCook.asp? Jmdcw = 169% 20and % 201 = 1

 

Source: fallen leaf s Blog focuses on network security!