Liang Jing South cms/inc/check_sql.asp Sql injection Based on Cookie

Catalog

1 . Vulnerability Description 2 . Vulnerability trigger Condition 3 . Vulnerability Impact Range 4 . Vulnerability Code Analysis 5 . Defense Methods 6. Defensive thinking

1. Vulnerability description

Relevant Link:
2. Vulnerability Trigger Condition
3. Vulnerability Impact Range
4. Vulnerability Code Analysis
5. Defense Methods

/inc/check_sql.asp

On Error Resume Next. " '" Chk_badword=split (Query_badword,"∥") for each fy_get in Request.Cookies For    i=0  to Ubound (chk_badword)        If Instr (LCase (Request.Cookies (Fy_get)), Chk_badword (i)) <>0  then        response.end        End If    nextnext" "

6. Defensive Thinking

Copyright (c) Littlehann All rights reserved

Liang Jing South cms/inc/check_sql.asp Sql injection Based on Cookie