SiteServer CMS 0Day-vulnerability warning-the black bar safety net

After testing spike the latest of the 3. Version 5 stieserver official website:www. siteserver. cn EXP: Direct access to the UserCenter/login. aspx The username at the input: 1 2 3'insert into bairongAdministratorUserName,Password,PasswordFormat,PasswordSalt...

SiteServer 3.4.4 logical vulnerabilities lead to SQL injection-vulnerability warning-the black bar safety net

Author: blue girl The problem is in the UserCenter. Pages. DLL in the Register, the registration process is logical to have problems, as follows: 1. The program put the user name into the database query, if the user name is not repeated, into the second step; 2. Then in the remote detection of th...