客户案例地址:http://www.xanet.net/case.php
默认后台地址:/admin或/myadmin
logincheck.php
我们还是拿厂商站进行测试 注入地址:http://www.xanet.net/admin/login
数据包:
sqlmap
影响百余个客户 我这里列一些出来
http://www.xanet.net/admin/login/
http://www.weishangzhiye.com/admin/login/
http://www.hzmflower.com/admin/login/
http://news.nwu.edu.cn/xiaoqing/admin/login.php
http://dashenggz.com/admin/login/
http://wwwhottun-china.com/admin/login/
http://www.xayinji.com/admin/login/
http://www.sxzqcl.com/admin/login/
http://www.weishangzhiye.com/admin/login/
http://changyoukangfu.com/admin/login/
http://www.sxaxzxxh.com/admin/login/
http://delanyanuo.com/admin/login/
http://www.bianshundq.com/admin/login/
http://www.elrjy.com/admin/login/
http://ssdljxl.com/admin/login/
http://www.dky53.com/admin/login/
http://www.adotlighting.com/admin/login/
http://www.aideshengtai.com/admin/login/
http://gelinjiaju.com.cn/admin/login/
http://www.gjbhyj.com/admin/login/
http://www.qyqyjt.com/admin/login/
http://www.sxzstzgs.com/admin/login/
http://www.jdsh88.com/admin/login/