網站偵掃時遇到這兩個問題可否請教一下 怎麼去修訂他
一、Cross site scripting (verified)
URL encoded GET input page was set to 1'"()&%Z7rQ(9817)

從這檔案得到的風險
Print.ASP?id=&page=1'"()%26%25<ScRiPt%20>Z7rQ(9817)
HTTP/1.1

Cookie: ASPSESSIONIDSAAQDTAT=DBKFBBPBBIDPPOAGJKPHAOOO
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Encoding: gzip,deflate

Host:my wed url
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
Gecko) Chrome/73.0.3683.103 Safari/537.36

Connection: Keep-alive
--------------------------------分隔線--------------------------------------------------------------------------------------------------------------------
二、SQL injection
URL encoded GET input id was set to -1 OR 321=6 AND 000655=000655

Tests performed:
-1 OR 2+655-655-1=0+0+0+1 => TRUE
-1 OR 3+655-655-1=0+0+0+1 => FALSE
-1 OR 32<(0+5+655-655) => FALSE
-1 OR 32>(0+5+655-655) => FALSE
-1 OR 2+1-1+1=1 AND 000655=000655 => FALSE
-1 OR 32=5 AND 000655=000655 => FALSE
-1 OR 32=6 AND 000655=000655 => TRUE
-1 OR 320=6 AND 000655=000655 => FALSE
-1 OR 321=6 AND 000655=000655 => TRUE

Original value: 1
從這檔案得到的風險
Print.ASP?id=-1%20OR%20321=6%20AND%20000655=000655&page= HTTP/1.1

X-Requested-With: XMLHttpRequest
Referer: my wed url
Cookie: ASPSESSIONIDSAAQDTAT=DBKFBBPBBIDPPOAGJKPHAOOO
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8
Accept-Encoding: gzip,deflate

Host:my wed url
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
Gecko) Chrome/73.0.3683.103 Safari/537.36
Connection: Keep-alive