Shulou(Shulou.com)06/02 Report--

How to eliminate dede loopholes, I believe that many inexperienced people do not know what to do, so this paper summarizes the causes of the problem and solutions, through this article I hope you can solve this problem.

Solution:

Plus/recommend.php deletes the file to avoid high-risk vulnerabilities

Cause: Dedecms recommend.php SQL injection vulnerability

WASC Threat Classification

Discovery time:

2014-06-26

Type of vulnerability:

SQL injection

The procedure for building the station:

DedeCMS

Server type:

Universal

Programming language:

PHP

Description:

The target has a SQL injection vulnerability.

1.SQL injection means that the user performs an unauthorized arbitrary query process by deceiving the database server.

-put it away.

two。 The vulnerability file recommend.php, which was improperly handled somewhere, caused the bypass to create a vulnerability.

Harm:

Being injected by SQL may result in the following consequences:

1. The web page has been tampered with

two。 The data was tampered with

-put it away.

3. Core data was stolen.

4. The server where the database is located has been turned into a zombie host.

Solution:

Upgrade to the latest version to ensure that other vulnerabilities are fixed as well.

After reading the above, have you mastered how to clean up the dede loophole? If you want to learn more skills or want to know more about it, you are welcome to follow the industry information channel, thank you for reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.