maxcms 电影CMS 注入

  • A+
所属分类:漏洞时代
摘要

漏洞文件/inc/ajax.asp 33-40 行这里看下 isNul 函数是做什么判断,inc/CommonFun.asp 191-193

漏洞文件/inc/ajax.asp 33-40 行

Sub getscore(ac)   dim id,ary,ret : id=getForm("id","get")   if isNul(id) then die "err"   if ac="newsscore" then    ary=conn.db("SELECT m_digg,m_tread,m_score FROM {pre}news WHERE m_id="&id,"array")   else    ary=conn.db("SELECT m_digg,m_tread,m_score FROM {pre}data WHERE m_id="&id,"array")   end if

这里看下 isNul 函数是做什么判断,inc/CommonFun.asp 191-193

Function isNul(str)   if isnull(str) or str="" then isNul=true else isNul=false  End Function

这里只是简单的判断是不是空,不是空就可以了

发表评论

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: