School Website 1.0 vulnerabilities and repair

 

# Title: School website system 1.0 Vulnerabilities

 

# Time: 2011-10-30

 

# Team: 90sec Author: net' work www.2cto.com

######################################## ####################################

 

By: net' work

Don't shoot bricks,

Source code: http://www.bkjia.com/ym/201110/30029.html

 

Simple Vulnerability

Id = request. QueryString ("id ")

If id <> "" then

Conn.exe cute ("update News set num = num + 1 where id =" & id &"")

Set rs = Server. CreateObject ("Adodb. Recordset ")

Rs. open "select * from News where id =" & id, Conn, 1, 2

 

Injection article: http://www.bkjia.com/NewsView. asp? Id = 1

 

 

Upload: http://www.bkjia.com // Editor/asp/upload_json.asp

Http://www.bkjia.com // Editor/asp/file_manager_json.asp

Management path: http://www.bkjia.com/admin/login. asp

 

Www.2cto.com:

 

Filter the NewsView. asp page id parameter input digits.

For upload solutions, refer to the previous article.