极客网(geeks.cn)SQL注入漏洞及修复下载

网站是用ecshop搭建的，所以，试了下SQL注入POST: http://www.geeks.cn/flow.php?step=add_to_cart

goods={"quick":0,"spec":["163","158'"],"goods_id":2060,"number":1,"parent":0}



成功了就...

修复方案：

更新补丁