网站漏洞检测归类和解决方案（Website vulnerability detection, classification and solution）.docVIP

网站漏洞检测归类和解决方案（Website vulnerability detection, classification and solution） Everything is ready except one crucial element. Last night, the west wind withered green trees, alone on the tall buildings, looking at the end of the road. I will mount a long wind some day and break the heavy waves, and set my cloudy sail straight and bridge the deep, deep sea。 The pen falls into the wind and rain, and the poem becomes the ghost. Who knows nothing? Its never too late to mend. This article is contributed by s8h4a2n6 DOC documents may experience poor browsing on the WAP side. It is recommended that you first select TXT, or download the source file to the local view. A, Typical website vulnerability classification According to the risk level, the website vulnerability can be divided into three kinds of high risk, medium risk and low risk. Among them, high-risk vulnerabilities must be blocked. Some of the loopholes in the medium and low risk vulnerabilities must be blocked. There are also some medium and low risk vulnerabilities, which may be selectively blocked because the cost of plugging may be higher than the losses caused by non blocking. Tools can be used to search the platform for vulnerability scanning, the specific address is: typical website vulnerability classification and corresponding sealing requirements as shown in the table below: Risk level 1, the high risk of SQL injection 2, cross site vulnerabilities Medium and low risk 1, default test case file 2, management background landing portal Medium and low risk 1, email address exists Vulnerability name 3, XPATH injection leak 3, application error caused by 2, invalid link hole information leakage 4, backup files caused by source code leakage 3, Web application default directory Sealing requirement Must plug Selective plugging One Two, Typical website vulnerability impact and Solutions 1, SQL injection vulnerability impact: this vulnerability belongs to the common vulnerabilities in Web application security, belo