代碼審計之bluecms1.6後臺SQL注入

bluecm1.6版本後臺存在SQL注入 漏洞點鏈接： http://127.0.0.1/bluecms_v1.6_sp1/uploads/admin/nav.php?act=edit&navid=1 代碼： elseif($act=='edit') { $sql = "select * from ".table('navigate')." where navid = ".$_GET['na

>>阅读原文<<