Zhengzhou Nissan Automobile Co., Ltd. has more SQL Injection

Zhengzhou Nissan Automobile Co., Ltd. has more SQL Injection

For more information, see www.zznissan.com.cn.

Code Region

http://heilongjiang.zznissan.com.cn/showcartype_img.php?mid=5

This is

There are multiple injection vulnerabilities detected by boredom

[73 tables]

+ ------------------------- +

| User |

| Article |

| Category |

| Category_bak |

| Counter |

| Country |

| Cxbj |

| Department |

| Dqcategory |

| Email_td |

| Fankui |

| Game_list1 |

| Game_list2 |

| Hk_article |

| Huikan |

| Imagefile |

| Imgcategory |

| Ip |

| Jxcs |

| Jxs |

| Jxs_article |

| Jxs_category |

| Jxs_cpscxl |

| Jxs_cxbj |

| Jxs_dc |

| Jxs_dxjl |

| Jxs_dxnp |

| Jxs_hqbj |

| Jxs_imagefile |

| Jxs_imgcategory |

| Jxs_rencai |

| Jxs_user |

| Jxs_userfun |

| Jxs_usergroup |

| Jxs_wydc |

| Jxs_zhaopin |

| Jxs_zxzx |

| Memberawke |

| Memberinfo |

| Memberinfo_t |

| Membermark |

| Membermodify |

| Memberpay |

| Navigation |

| Newshop |

| Online |

| Rencai |

| Sendmail_members |

| Sessions |

| T_bbs_table |

| T_bbs_user |

| Templete |

| Tg_class |

| Tg_content |

| Tg_wydc |

| Topic |

| Tp |

| Tuangou |

| Userfun |

| Usergroup |

| Vote |

| Wenjuan2008_ansdetails |

| Wenjuan2008_answer |

| Wenjuan2008_loginrecord |

| Wenjuan2008_user |

| Wenjuan2009_loginrecord |

| Wenjuan2009_user |

| Wjshuaike2009_answer |

| Wqw_city |

| Wqw_prov |

| Zhaopin |

| Zz_city |

| Zz_prov |

+ ------------------------- +

More than 70 tables are very useful

Solution:

Fix and filter, you know.