ASP³ÌÐòµ÷ÊÔ
ÊÖÍ·Ö»ÓÐDW
ÐÞ¸ÄASP³ÌÐò£¬²»ÖªµÀÔõôµ÷ÊÔ¡£
¾ÍÏñJSÖеÄalert£¨£©ÕâÑùµÄµ÷ÊԾͿÉÒÔ¡£
ÔõôÔÚASP³ÌÐòÖÐÊä³ö¹ý³Ì±äÁ¿µÄÖµ£¿
û·¢Ïֵĺõķ½·¨£¬²»¹ýÊä³öjavascriptÒ²Ðа¡
VBScript code:
response.write("<script>alert('alert word')</script>")
Ò»°ã¶¼ÊÇÀàËÆ2Â¥µÄ·½Ê½À´ÊµÏÖ£¬²»¹ý¿ÉÒÔ×öÒ»¸öº¯Êý¿â¡£×öÀàËÆµÄº¯Êý
sub msg(s_str)
response.write(" <script>alert('"&s_str&"') </script>")
end sub
Ïà¹ØÎÊ´ð£º
<%@language="vbscript"%>
<%option explicit%>
<html>
<head> <title>xxx </title> </head>
<script language=vbs>
'×¢Òâ±äÁ¿ ......
ÎÒÃÇÓÐÒ»¸öÍøÕ¾Ä£°å£¬www.c111.com.cn,Ï£ÍûÐÞ¸ÄһЩµØ·½£º
1£©µã»÷×ó²à¡°·þÎñÆ·ÅÆ¡±µÄÆäÖÐÒ»¸öС·ÖÀ࣬Èç¡°×ãÇò¡±£¬½çÃæµÄÓÒ²à¾Í³öÏÖÈçwww.c111.com.cn/1.jpg£¬µã»÷1.jpgÉÏ·½µÄÆäÖÐÒ»¸öÆ·ÅÆlogo£¬ÏÂÃæ¾Í³öÏÖÏà¹ØµÄÍ ......
ÓÉÓÚ¶ÔÒ³ÃæÊ¹ÓÃÁËα¾²Ì¬
²¢ÇÒ¶ÔID½øÐÐÁ˼ÓÃÜ¡£
Ö÷Òª´úÂëÈçÏ£º
httpd.ini
RewriteRule /List-([0-9,a-z]*).html /List.asp\?ComId=$1 [N,I]
³ÌÐò´úÂë
AΪ¼ÓÃÜ£¬BΪ½âÃܺ¯Êý
<a href=&q ......
ÎÒÏëÓÃaspд¸öÒ³ÃæÒÔǰûÓнӴ¥¹ý£¬ÎÒ¿´ÍøÉÏ˵aspµÄÔËÐл·¾³Ö»ÄÜÊÇwindows£¬»¹±ØÐëҪװIIS¡£
Çë½Ì¸÷λ¸ßÊÖ£¬asp»¹ÓÐÆäËûµÄÔËÐл·¾³Âð?
²î²»¶à¾ÍÕâЩÁË£¬¾ÍÊÇIISÒ»¶¨Òª×°ºÃ
»¹ÓÐÒªÊÇÓÃVS2005µÄ»°ºÃÏñ¿ÉÒÔÖ±½ÓÔ ......