An SQL injection vulnerability exists in a sub-station of happy Tao Network (more than 8 million user information)

An SQL injection vulnerability exists in a sub-station of happy Tao Network (more than 8 million user information)

The SQL injection of a website on happy tao.com involves more than 8 million users.

Http://huan.letao.com/wap/app_download.aspx? Op = brand & bid = 10 injection point: bid

11 Databases
 

Available databases [11]: [*] ASPState [*] distribution [*] ImagesRecord [*] letao_accounting [*] Letao_Web_Log [*] letaoerp [*] master [*] model [*] msdb [*] tempdb [*] zcltest

Among them, letaoerp's user information is as high as 8 million +
 

Friendly test. Click it to finish. please fix it as soon as possible!

 

 

Solution:

Filter.