On a page of Yida CMS, the SQL injection vulnerability exists and is fixed.

Brief description:
SQL Injection exists on this page. You can obtain the Logon account password of the background management. Although the system uses SQL anti-injection, this page is not strictly filtered.

Detailed description:
Http: // www. *****. com/zh_about.asp? Id = 3 the keyword is later... for general analysis source code, you can know how to manually add the Administrator table to guess the username and password... the background can easily win webshell because of its powerful functions
Proof of vulnerability:

 

 

 

 

Www.2cto.com solution:
Filter the id parameter input of the page

Source Frankie @ wooyun