PDA

Bekijk Volledige Versie : Re: Aenovo Multiple Vulnerabilities (Patch)



ali202@fastermail.com
18/10/05, 00:45
Patch :
[1]
In "user/control.asp"
Find this :

---------------------------------
pword = Trim(request("password"))
---------------------------------

Replace with this:

---------------------------------
pword = replace(Trim(request("password")),"'","''")
---------------------------------

[2]
In "incs\searchdisplay.asp"
Find this:

---------------------------------
strSQL = request("strSQL")
---------------------------------

Replace with this:

---------------------------------
strSQL = ""
---------------------------------

<ali202>