Icomex cms SQL Injection defects and repair

 

Title: icomex cms SQL injection vulnerability

Author: XaDaL www.2cto.com

: Http://www.icomex.com/

Test Platform: windows

 

Test example

= X = http://www.bkjia.com/html/Home.htm? Article_id = [SQL]

 

= X = http://www.bkjia.com/html/services.htm? Article_id = [SQL]

 

= X = http://www.bkjia.com/html/updates.htm? Article_id = [SQL]

 

= X = http://www.bkjia.com/html/News.htm? Article_id = [SQL]

 

Www.2cto.com solution:

Filter the input article_id parameters of these pages

######################################## #####################################

 

Thanks:

 

# Magelangcyber Team, Indonesiancoder family

 

# Xr0b0t, kaMtiez, 1 bliez, jundab, boebefa, ulow, ryanaby, kampret0

 

# Virgi, hakz, dr. CruZz, geni212, red robot, anharku, jos_ali_joe

 

# Arianom, tukulesto, cimpli, contrex, t3ll0, el-farhatz, hakz

 

######################################## #####################################

 

Aya .. tunggu abang pulang ya :*:*

 

Buat para galau's selamat menggalau. = ))

Tak ada cewek 'sabunpun jadi = ))