There is a secondary injection of design defects in old versions of hdwiki

Secondary Injection for HDWiki-v5.1GBK-20121102 design defects


After logging on to the user, follow the steps shown in the image. When ignoring the list, the input items will be recorded in the wiki_pms table for the first time, and then submitted again, he will perform a check from the wiki_pms table. The SQL statements tracked in the background are: Check statement: select id, new, delstatus, og from wiki_pms where toid = 2 and delstatus! = 2 and drafts! = 1 and 'from 'not in ('dasd') or sleep (5) # ') insert statement: replace into wiki_blacklist (uid, blacklist) VALUES ('2 ', 'dasd \ ') or sleep (5) #') and submit the sleep function again to start execution.Solution:Filter the variables in each SQL statement.