if CookieUserName =empty then error("您还未<a href=""javascript:BBSXP_Modal.Open ('Login.asp',380,170);"">登录</a>") '保存cookie登陆即可
ThreadID=R


漏洞文件:MoveThread.asp
MoveThread.asp行2-24
<%
if CookieUserName =empty then error("您还未<a href=""javascript:BBSXP_Modal.Open (''Login.asp'',380,170);"">登录</a>") ''保存cookie登陆即可 ThreadID=Request("ThreadID") '' Sql Injection Vulnerability
If Not IsNumeric(ThreadID) then
ThreadIDArray=Split(ThreadID,",") ''判断数组,避免13行出错
if IsArray(ThreadIDArray) then
for i=0 to Ubound(ThreadIDArray)
if Execute ("Select ThreadID from ["&TablePrefix&"Threads] where ThreadID="& ThreadIDArray(i)&"").eof then error"<li>系统不存在该帖子的资料"
next
ThreadIDSql=int(ThreadIDArray(0))
else
error("参数错误。")
end if
Else
ThreadIDSql=int(ThreadID)
End If


ForumID=Execute("Select ForumID From ["&TablePrefix&"Threads] where ThreadID="&ThreadIDSql&"")(0)
%>
<!-- #include file="Utility/ForumPermissions.asp" -->