Sogou Pinyin input method the special URL on the official website causes the SQL statement to report errors and paths

Sogou Pinyin input method the special URL on the official website causes the SQL statement to report errors and paths

Adding a slash path as a parameter in the search URL will cause a limit-10, 10 error in the program, and the website will not handle the error, resulting in a direct burst of SQL and Path

Normal URL: http://pinyin.sogou.com/dict/search/search_list/aa/normal

Vulnerability URL: http://pinyin.sogou.com/dict/search/search_list/aa/bb/normal

Adding a slash path as a parameter in the search URL will cause a limit-10, 10 error in the program, and the website will not handle the error, resulting in a direct burst of SQL and Path

Vulnerability address: http://pinyin.sogou.com/dict/search/search_list/aa/bb/normal
 

 

Solution:

Complete logical error handling