动易NewComment.asp注入漏洞

在NewComment.asp文件中 ModuleName = Trimrequest"ModuleName" 这个ModuleName变量没过滤好，从而导致，我们可以在下面的SQL语句中构造我们的 SQL语句 If ModuleName "" Then If ChannelID 0 Then If ClassID 0 Then sqlComment = "Select top " & Num & " C. from PEComment C left join PE" & ModuleName & " A on C.InfoID=A." & ModuleName &...

CVE-1999-1447

Internet Explorer 4.0 allows remote attackers to cause a denial of service crash via HTML code that contains a long CLASSID parameter in an OBJECT tag...

CVE-1999-1447: Undefined Security Weakness

Internet Explorer 4.0 allows remote attackers to cause a denial of service crash via HTML code that contains a long CLASSID parameter in an OBJECT tag...

CVE-1999-1447

Internet Explorer 4.0 allows remote attackers to cause a denial of service crash via HTML code that contains a long CLASSID parameter in an OBJECT tag...