上海大智慧某平台存在SQL注入漏洞

 

 

POST /MobileTrade/myReservationStep1.php HTTP/1.1
Content-Length: 63
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referer: https://dtsmt.gw.com.cn/
Cookie: PHPSESSID=kdf3fbjklgojpiqlngqiqnu0r1; TRADE_KEEP_SESSION=Y; TRADE_FILTER_ZERO=Y
Host: dtsmt.gw.com.cn
Connection: Keep-alive
Accept-Encoding: gzip,deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*

policyid=1013&productid=581

 

 

 

解决方案：