第一处:/research.asp对selectname未进行任何过滤，造成搜索型注入code：7-12行dim action,searchkey,anclassid,jiage,selectnameanclassid=request("ancl...

后台验证：验证文件：Clkj_Inc\WebOut.asp<%if session("username" <>"" then Set Rs=serve...

验证文件 seeion.asp<%if session("user_name" <>"" then%><%Else response.Write &q...