| File Store PRO 3.2 Blind SQL Injection |
|________________________________________|

Download from: http://upoint.info/cgi/demo/fs/filestore.zip
- Need admin rights:
/confirm.php:

复制代码代码如下:
if(isset($_GET["folder"]) && $_GET["folder"]!="") {
$folder=$_GET["folder"];
} else {
exit("Bad Request");
}
if(isset($_GET["id"]) && $_GET["id"]!="") {
$id=$_GET["id"];
} else {
exit("Bad Request");
}
// Validate all inputs
// Added by SepedaTua on June 01, 2006 - http://
Site: http://de-ce.net
Good luck !
--------------------------------------------------------------------