SQL Injection and restoration on the official website of China Internet Conference

Brief description: This afternoon I was bored and saw that TX was in the pop-up window. When I was about to hold an Internet conference, I clicked in and found that the website was really not so secure ....
Various types of reads are supported. getshell is supported.
Proof of vulnerability:

Http://www.2011cic.cn/huoban/listinfo.php? Id = 478
Tab_ad_info, tab_admin_menu, tab_admin_user, comment, comment, tab_member _ Integral_log, comment, tab_site _ comments, tab_site_channel, tab_site_comments, comment, tab_site_content, comment

Tab_ad_info, tab_admin_menu, tab_admin_user, comment, comment, tab_member _ Integral_log, comment, tab_site _ comments, tab_site_channel, tab_site_comments, comment, tab_site_content, comment

Id, Admin_user, Admin_pwd, Menu_array

Solution:

We recommend that you filter get.