BIWEB bug and repair

 

Biweb php open-source enterprise website building system (bug correction version ),

BIWEB portal PHP open source website building system,

BIWEB mall system PHP open source site building system.

 

1. Inclusion of kill

 

/Wap/detail. php, X, X...

$ ObjWebInit = new wap (); if (empty ($ _ GET ['page']) {

$ IntPage = 1;

} Else {

$ IntPage = intval ($ _ GET ['page']);

}

 

If (empty ($ _ GET ['cpage']) {

$ IntCPage = 1;

} Else {

$ IntCPage = intval ($ _ GET ['cpage']);

}

 

If (! Empty ($ _ GET ['mod']) {

$ StrModuleID = strval ($ _ GET ['mod']);

Include_once ('../'. $ strModuleID. '/config/var. inc. php ');

$ ObjWebInit-> setDBG ($ arrGPdoDB );

$ ObjWebInit-> db ();

 

Exp:

Http://www.bkjia.com/biwebcorp/wap/list. php? Mod = uploadfile/201112/20111218025615648 .jpg% 00

 

 

2.

PHP open-source enterprise website construction system (bug correction version) XSS

Message \ include \ index. inc. php

If ($ _ SERVER ["REQUEST_METHOD"] = "POST "){

 

If (empty ($ _ POST ['Contact ']) check: AlertExit ('Sorry, name is required! ',-1 );

If (empty ($ _ POST ['tel ']) check: AlertExit ('Sorry, the contact number is required! ',-1 );

.......

$ StrIP = check: getip ();

$ _ POST ['user _ ip'] = $ strIP;

$ ObjWebInit-> saveInfo ($ _ POST, 0); saveInfo function

Function saveInfo ($ arrData, $ intModify = 0 ){

$ Arr = array ();

$ Arr = check: SqlInjection ($ this-> saveTableFieldG ($ arrData ));

.......

 

} SqlInjection function

Static function SqlInjection ($ ParamValue, $ enforce = false ){

If (! Get_magic_quotes_gpc () | $ enforce ){

If (is_array ($ ParamValue )){

Foreach ($ ParamValue as $ key => $ value ){

$ ParamValue [$ key] = addslashes ($ value );

}

} Else {

$ ParamValue = addslashes ($ ParamValue );

}

}

Return $ ParamValue;

} Portal website PHP open-source website building system xss a big mess ..