search

thinkcmf / cmfx

ThinkCMFX ,based on ThinkPHP 3.2.3, it is same with ThinkCMF
http://www.thinkcmf.com
Other
363 stars 177 forks source link

修正一处sql注入 #15

Closed hex0wn closed 8 years ago

hex0wn commented 8 years ago

id处可构造exp形如：id[]=exp&id[]=1 or 1=1进行注入

hex0wn commented 8 years ago

还有多处地方存在注入问题

thinkcmf commented 8 years ago

已经修复