xpshop系统sql盲注一处
简要描述: 详细说明: 漏洞位置:xpshop.webui.checkout protected void PageLoadobject sender, EventArgs e this.sid = Utils.ReqIntParams"sid", -1; if base.CurrentUser == null base.Response.Redirectstring.Concatnew object "Login.aspx?ReturnUrl=/", WebUIBase.ShopFolder, "Checkout.aspx?sid=", this.sid ; else string...