蓝科cms(lankecms)V1.9 eShowNews.asp SQL注入漏洞

简介已经说明了注入位置了。然后谷歌一下。搜索了有关案例：  http://www.ampixel.com/eshownews.asp?id=61 http://ampixel.com/eshownews.asp?id=62 http://www.up-real.com/eshownews.asp?id=106 http://www.trendtronic.com.cn/eshownews.asp?id=65 http://www.jeffhouse.net/eshownews.asp?id=103 http://www.sdrunzhou.com/showcases.asp?id=60 http://www.planning.org.cn/news/shownews.asp?id=471 http://www.ttlg.com/shownews.asp?id=895 http://www.asmcs.com/shownews.asp?id=492 http://www.3dxchina.com/shownews.asp?id=100 http://www.up-real.com/showshop.asp?id=72 http://www.jdart.cn/showshop.asp?id=169 http://www.ospchina.com/showshop.asp?id=63 然后用sqlmap验证下检测到的是布尔类型的一个注入