清竹虚拟主机管理系统sql注入 + 后台构造cookie登

清竹 虚拟主机 管理系统sql注入 漏洞

 

NCompany\Index. asp

 

loadfile_fromcache templatePath&"NCompany-Index. html " '加载index.html模板 TempCon=TempCon&Application("Qz_TP_"&templatePath&"NCompany-Index.html") Id=ReStrs(Request.QueryString("Id"))//过滤不严格 Set rs=Conn.Execute("Select * From [Qz_NComPany] Where [Id]="&Id)//直接带入sql语句 Address=rs("Address") TelInfo=rs("TelInfo")

 

 

 

 

 

 

 

构造cookie:

 

AdminUser = 注入得来的adminuser

 

PassWord = 注入得来的adminpass

 

AdminExu = system.asp, jihua.asp, news_admin.asp, mailtemplate.asp, ads.asp, success.asp, ServerQQ.asp, member.asp, message.asp, agent_fenlei.asp, grade.asp, sendmail.asp, proclass.asp, domain.asp, domainbuy.asp, domainupdate.asp, hostlist.asp, hostbuy.asp, vpath.asp, bindcheck.asp, cert.asp, sqllist.asp, sqlbuy.asp, my_sqllist.asp, my_sqlbuy.asp, maillist.asp, mailbuy.asp, apppool.asp, scriptmaps.asp, serverlist.asp, apppoolmode.asp, serverdomain.asp, shopitem.asp, shoplist.asp, shopbuy.asp, money.asp, moneylog.asp, pay.asp, payonline.asp, domain_api.asp, password.asp, template.asp, links.asp

 

修复方案：

过滤

查看更多关于清竹虚拟主机管理系统sql注入 + 后台构造cookie登的详细内容...