标题: Con-IMedia SQL inj: vulnerable                       
作者: nGa Sa Lu [ GaNgst3r ]                                            
测试平台: Vista                                                                     
程序语言 : php                                                                                                                           
================================================================
 SQL Error Statement :
    Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in
/homepages/18/d158663934/htdocs/moneysystems/modules/mod_main.php on line 92         

[+] http://www.2cto.com /index1.php?linkid=[SQL HERE]

[+] Demo :
    http://www.gse.com.gh/index1.php?linkid=33'
    http://www.money-systems.net/index1.php?linkid=262'

www.2cto.com修复

过滤index1.php页面linkid参数输入为数字