shopxp html版2.0 CSRF漏洞

!--include file="xp.asp"-- % dim adminid,action action=request.QueryString"action" adminid=request.QueryString"id" if adminid="" then adminid=request"adminid" select case action case "save" set rs=server.CreateObject"adodb.recordset" rs.Open "select from shopxpadmin where adminid="&adminid,conn,1...

shopxp html version 2. 0 direct add administrator vulnerability-vulnerability warning-the black bar safety net

lan3a told me that he had sent out, it turns out I'm not the first one, the mad Khan.... and Program: shopxp html version 2. 0, the 1.0 should also be the same there Vulnerability: direct add administrator Keywords: is not found the keyword was depressed FROM http://www.st999.cn/blog BY wandering...

shopxp html version 2. 0 CSRF vulnerability-vulnerability warning-the black bar safety net

Program: shopxp html version 2. 0, the 1.0 should also be the same there Vulnerability: direct add administrator Keywords: is not found the keyword was depressed Program download:http://www.codepub.com/software/SHOPXP-7615.html !-- include file="xp. asp" - % dim adminid,action action=request...