测试方法:
@Sebug.net dis
本站提供程序(方法)可能带有攻击性,仅供安全研究与教学之用,风险自负!
- # Dede Cms All Versions Sql
Vulnerability Exploit
- # </ No Priv8 , Everything
is Public >
- # Date: 30/12/2011 -
13:00
- # Author: [ CWH ] | Finded By :
Nafsh
- # We Are : Mr.M4st3r , Nafsh ,
Skote_Vahshat , HijaX
- # Support:
Cyberwh.org
- # Mail:
Nafsh@live.com
- # Software Website:
http://www.dedecms.com
- # Security Risk:
High
- # Platform: Php
- >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
- [$]Dorks:
inurl:"id""DedeCMS Error
Warning!"
- [#]
Vulnerable Files :
- /list.php?id=[sql]
- /members.php?id=[sql]
- /book.php?id=[sql]
- >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
- </NoPriv8,EverythingisPublic>
- >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Dede(织梦) CMS SQL Injection Vulnerability,布布扣,bubuko.com
Dede(织梦) CMS SQL Injection Vulnerability
原文：http://www.cnblogs.com/milantgh/p/3616045.html
