Zoomla 1.5 /guest/ask/MyAskList.aspx SQL注入漏洞
/Guest/ask/MyAskList.aspxprotected void PageLoadobject sender, EventArgs e string str = ""; if !base.IsPostBack DataTable table; if this.bUser.CheckLogin this.user.Text = this.bUser.GetLogin.UserName; string userName = this.bUser.GetLogin.UserName; str = " And UserName'" + userName + "'"; if...