WordPress 3.1.3 SQL Inject

admin

sql inject
2 j" s7 `3 o) n9 b5 ^4 W* L: Q4 y

wp-includes/taxonomy.php

http://localhost/wp-admin/edit-tags.php?taxonomy=link_category&orderby = [SQL Inject]＆ORDER = [SQL Inject]http://localhost/wp-admin/edit-tags.php?taxonomy=post_tag&orderby = [SQL Inject]＆ORDER = [SQL Inject]http://localhost/wp-admin/edit-tags.php?taxonomy=category&orderby = [SQL Inject]＆ORDER = [SQL Inject]

wp-includes/bookmark.php

http://localhost/wp-admin/link-manager.php?orderby = [SQL Inject]＆ORDER = [SQL Inject]
1 Y& H) M$ I$ k) ~# B& P9 f: G, m9 {

olenglango

看一看                        

Anthony~

好东西谢谢分享