Notes on exploits and repairs of asp acc Vulnerabilities

The previous notes are occasionally sent. These vulnerabilities are injection vulnerabilities on download pages and search pages.
1. cookie injection for Download. asp files
Because the system uses a general anti-injection system, this is already a common problem. Only GET is filtered, but POST is not filtered for Cookies. The specific vulnerability is not analyzed. The Code is as follows:
Javascript: alert (document. cookie = "BigClassName =" + escape ("% 25' and 1 = 2 union select 1, admin, 3, password, 5, 6, 7, 8, 9, 10, 11, 12, 13 from admin where 1 = 1 and 'A' = "));
Simply put, access download. asp and enter the above Code in the IE input box to browse. Then, refresh the page to display the account and password.
2. I will not describe the injection of the search. asp file.
In addition, the webshell method obtained in the background is described as follows: (1) Using Database Backup (2) Upload_Photo.asp File Upload cer

Www.2cto.com fix: Filter cookies for injection, complete backup functions, cancel iis resolution such as cer