TXQASP blog v1.0 deluxe edition injection vulnerability and webshell in the background and repair

Affected Versions: TXQASP blog v1.0 deluxe edition Injection Vulnerability
 
: Http://down.chinaz.com/soft/29245.htm
 
Vulnerability file: index. asp
 
Your sister's homepage contains vulnerabilities
 
Vulnerability code:
 
<%
Rz_flid = request ("class_id ")
Set rs = server. CreateObject ("adodb. recordset ")
SQL = "select * from rizhi order by rz_time desc" cause: not filtered
 
Vulnerability exploitation: You are too lazy to manually run the tool directly.
 
Add Table: txq_admin add field: txq_username txq_password
 
Repair solution:

How can I filter out www.2cto.com?
 
For WEBSHELL in the background, Database Backup exists. The IIS6 parsing vulnerability is used together with the backup file name. asp is directly divided into one. database in asp format ........ below is free to play