资源描述：
《网站漏洞检测归类和解决方案（website vulnerability detection, classification and solution）》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。
1、网站漏洞检测归类和解决方案（Websitevulnerabilitydetection,classificationandsolution）Everythingisreadyexceptonecrucialelement.Lastnight,thewestwindwitheredgreentrees,aloneonthetallbuildings,lookingattheendoftheroad.Iwillmountalongwindsomedayandbreaktheheavywaves,andsetmycloudysailstr
2、aightandbridgethedeep,deepsea。Thepenfallsintothewindandrain,andthepoembecomestheghost.Whoknowsnothing?It'snevertoolatetomend.Thisarticleiscontributedbys8h4a2n6DOCdocumentsmayexperiencepoorbrowsingontheWAPside.ItisrecommendedthatyoufirstselectTXT,ordownloadthesourcefile
3、tothelocalview.A,TypicalwebsitevulnerabilityclassificationAccordingtotherisklevel,thewebsitevulnerabilitycanbedividedintothreekindsofhighrisk,mediumriskandlowrisk.Amongthem,high-riskvulnerabilitiesmustbeblocked.Someoftheloopholesinthemediumandlowriskvulnerabilitiesmust
4、beblocked.Therearealsosomemediumandlowriskvulnerabilities,whichmaybeselectivelyblockedbecausethecostofpluggingmaybehigherthanthelossescausedbynonblocking.Toolscanbeusedtosearchtheplatformforvulnerabilityscanning,thespecificaddressis:http://www.iiscan.comtypicalwebsitev
5、ulnerabilityclassificationandcorrespondingsealingrequirementsasshowninthetablebelow:Risklevel1,thehighriskofSQLinjection2,crosssitevulnerabilitiesMediumandlowrisk1,defaulttestcasefile2,managementbackgroundlandingportalMediumandlowrisk1,emailaddressexistsVulnerabilityna
6、me3,XPATHinjectionleak3,applicationerrorcausedby2,invalidlinkholeinformationleakage4,backupfilescausedbysourcecodeleakage3,WebapplicationdefaultdirectorySealingrequirementMustplugSelectivepluggingOneTwo,TypicalwebsitevulnerabilityimpactandSolutions1,SQLinjectionvulnera
7、bilityimpact:thisvulnerabilitybelongstothecommonvulnerabilitiesinWebapplicationsecurity,belongingtoOWASPTOP10(2007)intheinjectionclassvulnerabilities.SQLinjectionvulnerabilitiesarepresentinmanyWEBapplications.SQLinjectionisanattackerwhousescodeflawstoattack,andcanbeuse
8、dinanyapplicationparameterthatcanaffectdatabasequeries.Forexample,theparametersoftheURLitself,postdata,orcookievalues
