74cms 逻辑漏洞导致sql注入2

简要描述： 74cmsv3.4.20140410逻辑漏洞导致sql注入 详细说明： /include/funpersonal.php346-373 $resumework=getresumework$uid,$pid; $resumetraining=getresumetraining$uid,$pid; $resumephoto=$resumebasic'photoimg'; if !empty$resumework$percent=$percent+13; if !empty$resumetraining$percent=$percent+13; if...