搜房网某站存在SQL注入漏洞

POST /Evaluation/Home/VoteLecturer HTTP/1.1

Content-Length: 40

Content-Type: application/x-www-form-urlencoded

X-Requested-With: XMLHttpRequest

Referer: https://training.fang.com/

Cookie: ASP.NET_SessionId=jvlswl2fwu115elebgmz5vuh; agent_loginid=; agent_loginname=; agent_loginpwd=; UserIdentity=20160513175011--b628706d-9b58-460b-b95a-2131fb9428a0; CNZZDATA1254798975=386467192-1463133108-http%253A%252F%252Fwww.acunetix-referrer.com%252F%7C1463133108; vjsid=O6+TbVc1o7RHgWWr0Br/Ag==; global_cookie=258x704jp2bclec7681kvjcq618io5jp6ai; unique_cookie=U_258x704jp2bclec7681kvjcq618io5jp6ai*1; __utmt_t0=1; __utmt_t1=1; __utmt_t2=1; __utma=147393320.1915133306.1463133299.1463133299.1463133299.1; __utmb=147393320.5.10.1463133299; __utmc=147393320; __utmz=147393320.1463133299.1.1.utmcsr=acunetix-referrer.com|utmccn=(referral)|utmcmd=referral|utmcct=/javascript：domxssExecutionSink(0,"'\">()refdxss")

Host: training.fang.com

Connection: Keep-alive

Accept-Encoding: gzip,deflate

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21

Accept: */*

ID=1

 

 

解决方案：