深山网站管理系统 漏洞 - 脚本漏洞

'line.asp
dim idsd
idsd=trim(request("id"))
if idsd="" or idsd=0 or not isnumeric(idsd) then
    '.略
rs.open "select * from qwbm_line where shenhe=1 and id="& idsd,conn,1,3
    if rs.eof and rs.eof then
        call titleisnull("您所查找到的信息可能已经删除","","","","","")
    else

'adminindex.asp
if request("action")="login" then        
'略
set man=server.createobject("adodb.recordset")
'略
man.update    
response.cookies(""& qwbmcms2 &"username") = man("qwbmuname")
response.cookies(""& qwbmcms2 &"username").expires = dateadd("h",100000,now())