danny/code-audit
1
0
Fork 0
mirror of https://gitee.com/gaohongy/code-audit.git synced 2026-07-16 08:23:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

修正图片引用

Browse Source
This commit is contained in:
高宏宇
2025-10-30 17:59:27 +08:00
parent 0d7f6f0374
commit b53132af22
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
第六章/01.md
+3 -3
View File
@@ -381,7 +381,7 @@ insert into tables(1,2) values('xx',0x3c7363726970743e616c6572742831293c2f736369
insert into userinfo(username,PASSWORD, email) values('xx',0x3c7363726970743e616c6572742831293c2f73636970743e,'a');
```
![image-20251023142651626](/media/danny/Data/CUIT/代码审计/第六章/img/image-20251023142651626.png)
![image-20251023142651626](img/image-20251023142651626.png)
双等于和三等于
@@ -459,7 +459,7 @@ if(file_exists('install.lock'){
还有一种是以重复发包来利用时间差，以少量的钱多次购买。
![image-20251023144200551](/media/danny/Data/CUIT/代码审计/第六章/img/image-20251023144200551.png)
![image-20251023144200551](img/image-20251023144200551.png)
## 2.2. Ecshop逻辑错误注入
@@ -559,7 +559,7 @@ http://localhost/ECshop/respond.php?code=alipay&subject=0&out_trade_no=%00' and
另外，浮现该漏洞需要打开后台的支付宝功能。
![image-20251023165548260](/media/danny/Data/CUIT/代码审计/第六章/img/image-20251023165548260.png)
![image-20251023165548260](img/image-20251023165548260.png)
# 3. 会话认证漏洞