基于get的xss注入

最新推荐文章于 2024-06-04 13:39:04 发布

原野追逐科技

最新推荐文章于 2024-06-04 13:39:04 发布

阅读量745

点赞数

本文链接：https://blog.csdn.net/a843538946/article/details/85054782

版权

abc.php

<?php
$servername = "localhost";
$username = "root";
$password = "root";
$dbname = "test";

// 创建连接
$conn = new mysqli($servername, $username, $password, $dbname);
// 检测连接
if ($conn->connect_error) {
    die("连接失败: " . $conn->connect_error);
}

$sql = "INSERT INTO yonghu (username, password)
VALUES ('John', '".$_GET['id']."')";

if ($conn->query($sql) === TRUE) {
    echo "ok";
} else {
    echo "Error: " . $sql . "<br>" . $conn->error;
}

$conn->close();
?>

浏览器访问 http://localhost/abc.php?id=234<script>alert("1231")</script>

但是如果输入http://localhost/abc.php?id=234<script>alert('1231')</script>会报错，拼接不出字符串

发现数据库插入成功

password的字段信息为2<script>alert("1231")</script>

然后显示该信息写个welcome.php

代码如下

<html>
<body>
<?php
$con = mysql_connect("localhost","root","root");
if (!$con)
{
die('Could not connect: ' . mysql_error());
}
else
{
mysql_select_db("test");

   $id = $_GET['id'];
$query ="select * from yonghu where Id=$id";
$result = mysql_query($query);
$info= mysql_fetch_array($result);
$re_num = mysql_num_rows($result);
       if($info==FALSE)
       {
           echo "抱歉，您的订餐信息没有查到！";
       }
       else
       {
               echo "<form action='index.php' method='post' name='chakanform'>";
               echo "<table>";
               echo "<tr>";
               echo "<h3>你的订餐记录是:</h3>";
               echo "</tr>";
               echo "<tr>";
               echo "<td>";
               echo "序号：";
               echo "</td>";
               echo "<td>";
               echo "菜品：";
               echo "</td>";
               echo "<td>";
               echo "订餐时间";
               echo "</td>";
               echo "<td>";
               echo "订餐时间";
               echo "</td>";
               echo "<td>";
               echo "订餐时间";
               echo "</td>";
               echo "<td>";
               echo "订餐时间";
               echo "</td>";
                                echo "<td>";
               echo "订餐时间";
               echo "</td>";
               echo "<td>";
               echo "订餐时间";
               echo "</td>";
               echo "</tr>";
               do
               {
                   $xuhao++;
                   echo "<tr>";
                   echo "<td>";
                   echo $xuhao;
                   echo "</td>";
                   echo "<td>";
                   echo $info[username];
                   echo "</td>";
                   echo "<td>";
                   echo $info[password];
                   echo "</td>";
                   echo "<td>";
                   echo $info[id];
                   echo "</td>";
                            echo "<td>";
               }
               while($info= @mysql_fetch_array($result));
               echo "</table>";
               echo "</form>";
       }
mysql_close($con);
}

?>
</body>
</html>

结果访问提示alert，成功注入

原野追逐科技

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
基于get的xss注入

abc.php&lt;?php$servername = "localhost";$username = "root";$password = "root";$dbname = "test"; // 创建连接$conn = new mysqli($servername, $username, $password, $dbname);// 检测连接if ($conn-&gt;...
复制链接

扫一扫