e-cology 时间盲注（hpid参数）

1、缺陷文件homepage/LoginHomepage.jsp 2、注入参数：hpid3、涉及厂商：泛微软件4、证明：sqlmap.py -u "http://localhost/homepage/LoginHomepage.jsp?hpid=52" --technique T --dbms "Microsoft SQL Server"...

Sql injection

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter...

CVE-2010-1660

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter...