欢迎您访问程序员文章站本站旨在为大家提供分享程序员计算机编程知识!
您现在的位置是: 首页  >  网络运营

搜房网某站存在SQL注入漏洞

程序员文章站 2022-07-10 15:15:15
POST /Evaluation/Home/VoteLecturer HTTP/1.1 Content-Length: 40 Content-Type: application/x-www...

POST /Evaluation/Home/VoteLecturer HTTP/1.1

Content-Length: 40

Content-Type: application/x-www-form-urlencoded

X-Requested-With: XMLHttpRequest

Referer: https://training.fang.com/

Cookie: ASP.NET_SessionId=jvlswl2fwu115elebgmz5vuh; agent_loginid=; agent_loginname=; agent_loginpwd=; UserIdentity=20160513175011--b628706d-9b58-460b-b95a-2131fb9428a0; CNZZDATA1254798975=386467192-1463133108-http%253A%252F%252Fwww.acunetix-referrer.com%252F%7C1463133108; vjsid=O6+TbVc1o7RHgWWr0Br/Ag==; global_cookie=258x704jp2bclec7681kvjcq618io5jp6ai; unique_cookie=U_258x704jp2bclec7681kvjcq618io5jp6ai*1; __utmt_t0=1; __utmt_t1=1; __utmt_t2=1; __utma=147393320.1915133306.1463133299.1463133299.1463133299.1; __utmb=147393320.5.10.1463133299; __utmc=147393320; __utmz=147393320.1463133299.1.1.utmcsr=acunetix-referrer.com|utmccn=(referral)|utmcmd=referral|utmcct=/javascript:domxssExecutionSink(0,"'\">()refdxss")

Host: training.fang.com

Connection: Keep-alive

Accept-Encoding: gzip,deflate

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21

Accept: */*

ID=1

 

搜房网某站存在SQL注入漏洞

 

解决方案: