Vulnerabilities and fixes in the latest versions of online shopping multi-user fashion edition of Wangqu

Program: Wangqu Online Shopping System Multi-User fashion version Build 101101

Download: http://www.bkjia.com/ym/201011/24548.html

/Admin/listshj. asp? Id = 4567 is thrown into the ah d to run.

 

Listshj. asp is not verified, where

 

<% Dim shjiaid
Shjiaid = request. querystring ("id ")
Set rs = server. createobject ("adodb. recordset ")
Rs. open "select * from [shjia] where shjiaid =" & shjiaid, conn, 1,1%>

ID is not filtered, injection is generated, and it can be directly thrown into the ah d. Let the tool automatically

The following id value is 4567, which is the ID value of the merchant that comes with the system.

As for the ID value of the Self-registered merchant, I did not find it, and sweated.

What's even more exaggerated is that you can directly open this website and upload the website. When you see it, you are dizzy and there is an upload vulnerability. Previous versions do not exist, the latest version does exist...

 

Upload. asp? Formname = userinfo & editname = logo & uppath = upfile & filelx = jpg

 

/Admin/review. asp

This file also has a vulnerability. I checked it online and someone posted it.

Fixed: Needless to say, the old problem is solved.