Dvbbs8. 1 0DAY(through the kill access and mssql version-bug warning-the black bar safety net

Author:Tr4c3at1 2 6dotCoM http://www.nspcn.org http://www.tr4c3.com I have the honour to in this document to the at my wife is not around when with me YY,see AV n37p47ch,King,murong the rain and the BK instantly group all the screwing around with. These days is really boring very, Ah, the night...

Dvbbs8.1 注入漏洞

DVBBS是由海口动网先锋网络科技有限公司开发的网络社区软件。因为在UserPay.asp调用的调用了AliPayReturn过程中直接把获取的OrderNo放到sql里面，过滤不严，存在着远程注入漏洞 起因是没有正确的过滤用户输入。 Dvbbs8.1 Access,mssql 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.dvbbs.net 参考：http://www.tr4c3.com/post/275.html...