+-----------------------+ | Banana Dance CMS+Wiki | +-----------------------+ 缺陷Web-App : Banana Dance CMS+Wiki 缺陷类型 : SQLi 作者 : Aodrulez. HdhCmsTest2cto测试数据 Email : f3arm3d3ar@gmail测试数据 测试平台 : Ubuntu 10.04 下载地址: http://HdhCmsTestdoyoubananadance测试数据/functions/dl.php?file=4e84e50f89bf7 +---------+ |技术日志 | +---------+ 1] SQLi 示例: http://HdhCmsTest2cto测试数据 /user.php?id=1'[sqli] Error: ------ 错误分析: SELECT `key`,`value` FROM `bd_user_data` WHERE `user_id`='1'' Error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ''1''' at line 1 +----------+ | MalCon | +----------+ (International Malware Conference) The CFP for MalCon-2011 is ON! If you think you are good enough, try cracking our 'Capture the Mal Challenge-2011' online. Open to everyone! For more details, visit malcon.org 引用 "Microsoft is not the answer. Microsoft is the question. NO is the answer." - Erik Naggum
查看更多关于Banana Dance CMS and Wiki SQL注射缺陷及修复 - 网站安全的详细内容...