MvMmallv5.5SQL injection using php exp

MvMmallv5.5SQL injection using php exp

Vulnerability Type: MvMmall v5.5.1SQL Injection Vulnerability

Default backend: admincp. php? Module = index

Google Search: "Powered by MvMmall v5.5.1 ″

I. exploitation method: php exp Exploitation

1. Install the php Environment

Phpnow is easy to install.

2. Use exp attacks

Link: http://pan.baidu.com/s/1eQgr9FO

Password extraction: aahj

Download exp and save it to the PHP Directory.

For example, the path for building a php environment is D: \ PHPnow-1.5.6 \ php-5.2.14-Win32

Then, create a bat file named cmd.exe in the folder.

Open the bat file and enter

Php exp. php localhost/shop 1

(Localhost is the destination website address. shop is the second-level directory. If it does not exist, remove/shop)